X-Git-Url: http://git.openwrt.org/?a=blobdiff_plain;f=include%2Fhardening.mk;h=60f39428e83e92ec52e45a181686b58cbadec039;hb=82625374eea0613027d8dbe2bcfdce7beadaa883;hp=c277081c510773620345bf03d9a6a6d3fe060b95;hpb=6010a1cdb729aefdb1121b29b26347c664e20fff;p=openwrt%2Fopenwrt.git

diff --git a/include/hardening.mk b/include/hardening.mk
index c277081c51..60f39428e8 100644
--- a/include/hardening.mk
+++ b/include/hardening.mk
@@ -6,6 +6,7 @@
 #
 
 PKG_CHECK_FORMAT_SECURITY ?= 1
+PKG_ASLR_PIE ?= 1
 PKG_SSP ?= 1
 PKG_FORTIFY_SOURCE ?= 1
 PKG_RELRO ?= 1
@@ -15,6 +16,12 @@ ifdef CONFIG_PKG_CHECK_FORMAT_SECURITY
     TARGET_CFLAGS += -Wformat -Werror=format-security
   endif
 endif
+ifdef CONFIG_PKG_ASLR_PIE
+  ifeq ($(strip $(PKG_ASLR_PIE)),1)
+    TARGET_CFLAGS += $(FPIC)
+    TARGET_LDFLAGS += $(FPIC) -specs=$(INCLUDE_DIR)/hardened-ld-pie.specs
+  endif
+endif
 ifdef CONFIG_PKG_CC_STACKPROTECTOR_REGULAR
   ifeq ($(strip $(PKG_SSP)),1)
     TARGET_CFLAGS += -fstack-protector