From: Steven Barth <cyrus@openwrt.org>
Date: Tue, 16 Jun 2015 17:28:05 +0000 (+0000)
Subject: hardening: enable RELRO by default
X-Git-Tag: reboot~2763
X-Git-Url: http://git.openwrt.org/?p=openwrt%2Fstaging%2Fchunkeey.git;a=commitdiff_plain;h=f8140c9caf4d037e4347e828a96d9008a7e16f02;ds=sidebyside

hardening: enable RELRO by default

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 46004
---

diff --git a/config/Config-build.in b/config/Config-build.in
index 82ec0d6d0a..0584820cdd 100644
--- a/config/Config-build.in
+++ b/config/Config-build.in
@@ -270,6 +270,7 @@ menu "Global build settings"
 
 	choice
 		prompt "Enable RELRO protection"
+		default PKG_RELRO_FULL
 		help
 		  Enable a link-time protection known as RELRO (Relocation Read Only)
 		  which helps to protect from certain type of exploitation techniques