[Buildroot] [git commit] security hardening: add RELFO, FORTIFY options
Thomas Petazzoni
thomas.petazzoni at free-electrons.com
Mon Jan 29 16:48:17 UTC 2018
Hello,
On Mon, 29 Jan 2018 09:54:16 -0600, Matthew Weber wrote:
> I've internally started to look at build failures across all packages
> with the following config set in an off-line autobuilder.
> BR2_OPTIMIZE_1=y
> BR2_RELRO_FULL=y
> BR2_FORTIFY_SOURCE_1=y
> BR2_SSP_STRONG=y
>
> So far things are pretty broken but we'll see after I get past the tip
> of the iceburg how much work it might take to turn on a basic set of
> these options for regression.
OK, good. At some point, I think we will want to improve our random
config generator to generate once in a while configurations that
include those options.
Best regards,
Thomas
--
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux and Kernel engineering
http://free-electrons.com
More information about the buildroot
mailing list