staging/kaloz/include/hardening.mk, branch master

build: add hardened builds with PIE (ASLR) support

2018-01-27T15:46:45Z

Introduce a configuration option to build a "hardened" OpenWrt with ASLR PIE support. Add new option PKG_ASLR_PIE to enable Address Space Layout Randomization (ASLR) by building Position Independent Executables (PIE). This new option protects against "return-to-text" attacks. Busybox need a special care, link is done with ld, not gcc, leading to unknown flags. Set BUSYBOX_DEFAULT_PIE instead and disable PKG_ASLR_PIE. If other failing packages were found, PKG_ASLR_PIE:=0 should be added to their Makefiles. Original Work by: Yongkui Han Signed-off-by: Julien Dusser

hardening: make override variables more intuitive

2015-06-24T10:57:14Z

Signed-off-by: Steven Barth SVN-Revision: 46119

gcc/musl: rework SSP-support

2015-06-22T10:31:07Z

Make musl provide libssp_nonshared.a and make GCC link it unconditionally if musl is used. This should be a no-op if SSP is disabled and seems to be the only reliable way of dealing with SSP over all packages due to the mess that is linkerflags handling in packages. Signed-off-by: Steven Barth SVN-Revision: 46108

buildroot: move hardening options into separate file

2015-06-20T17:37:18Z

Signed-off-by: Steven Barth SVN-Revision: 46070