[Buildroot] [git commit] security hardening: add RELFO, FORTIFY options

Thomas Petazzoni thomas.petazzoni at free-electrons.com
Mon Jan 29 16:48:17 UTC 2018


Hello,

On Mon, 29 Jan 2018 09:54:16 -0600, Matthew Weber wrote:

> I've internally started to look at build failures across all packages
> with the following config set in an off-line autobuilder.
> BR2_OPTIMIZE_1=y
> BR2_RELRO_FULL=y
> BR2_FORTIFY_SOURCE_1=y
> BR2_SSP_STRONG=y
> 
> So far things are pretty broken but we'll see after I get past the tip
> of the iceburg how much work it might take to turn on a basic set of
> these options for regression.

OK, good. At some point, I think we will want to improve our random
config generator to generate once in a while configurations that
include those options.

Best regards,

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux and Kernel engineering
http://free-electrons.com



More information about the buildroot mailing list