From 19810a5145bcb9d9520df76abacf41adb195d54d Mon Sep 17 00:00:00 2001 From: Steven Barth Date: Wed, 17 Jun 2015 13:13:48 +0000 Subject: [PATCH] hardening: enable regular SSP support by default Signed-off-by: Steven Barth SVN-Revision: 46020 --- config/Config-build.in | 4 ++-- toolchain/gcc/Config.in | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/Config-build.in b/config/Config-build.in index 0584820cdd..42b8e8e5e3 100644 --- a/config/Config-build.in +++ b/config/Config-build.in @@ -219,7 +219,7 @@ menu "Global build settings" choice prompt "User space Stack-Smashing Protection" - default PKG_CC_STACKPROTECTOR_NONE + default PKG_CC_STACKPROTECTOR_REGULAR help Enable GCC Stack Smashing Protection (SSP) for userspace applications config PKG_CC_STACKPROTECTOR_NONE @@ -237,7 +237,7 @@ menu "Global build settings" choice prompt "Kernel space Stack-Smashing Protection" - default KERNEL_CC_STACKPROTECTOR_NONE + default KERNEL_CC_STACKPROTECTOR_REGULAR help Enable GCC Stack-Smashing Protection (SSP) for the kernel config KERNEL_CC_STACKPROTECTOR_NONE diff --git a/toolchain/gcc/Config.in b/toolchain/gcc/Config.in index d8141815fb..274b97c9b8 100644 --- a/toolchain/gcc/Config.in +++ b/toolchain/gcc/Config.in @@ -41,7 +41,7 @@ config EXTRA_GCC_CONFIG_OPTIONS config SSP_SUPPORT bool prompt "Enable Stack-Smashing Protection support" if TOOLCHAINOPTS - default n + default y help Enable Stack-Smashing Protection support -- 2.25.1