[Buildroot] [PATCH] utils/genrandconfig: drop hardening Config enables
Yann E. MORIN
yann.morin.1998 at free.fr
Mon May 24 13:32:38 UTC 2021
Matthew, All,
On 2021-05-24 15:16 +0200, Yann E. MORIN spake thusly:
> On 2021-05-21 08:17 -0500, Matthew Weber via buildroot spake thusly:
> > Since 810ba387bec3c5b, some form of these options are enable
> > by default. Specifically:
> >
> > - Kept FORTIFY level 2 option as the default is now level 1.
> > - Removed all SSP options as the default now uses the best
> > option based on toolchain support.
> > - Similar to SSP, for RELRO, the default now uses the best
> > option based on toolchain support.
> > - Completely drop PIC PIE as it defaults =y
> >
> > Signed-off-by: Matthew Weber <matthew.weber at collins.com>
> > ---
[--SNIP--]
> I was going to apply this, but then I was wondering: shouldn't we
> randomly *disable* them, now?
>
> Indeed, as much enabling those options randomly helped uncover build
> issues, maybe disabling them would also help?
>
> But I don't feel very strong either, so you should have no issue
> convincing me to apply as-is. ;-)
As discussed on IRC: if there is an issue with any of those disabled, we
can handle them as they are reported by users.
Regards,
Yann E. MORIN.
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 561 099 427 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
More information about the buildroot
mailing list