staging/robimarko/include/hardened-ld-pie.specs, branch master Staging tree of Robert Marko https://git.openwrt.org/openwrt/staging/robimarko/atom?h=master 2018-01-27T15:46:45Z build: add hardened builds with PIE (ASLR) support 2018-01-27T15:46:45Z Julien Dusser 2018-01-08T22:47:06Z urn:sha1:df0bd42fdeb76c9bc51b816c3df699db123c0024 Introduce a configuration option to build a "hardened" OpenWrt with ASLR PIE support. Add new option PKG_ASLR_PIE to enable Address Space Layout Randomization (ASLR) by building Position Independent Executables (PIE). This new option protects against "return-to-text" attacks. Busybox need a special care, link is done with ld, not gcc, leading to unknown flags. Set BUSYBOX_DEFAULT_PIE instead and disable PKG_ASLR_PIE. If other failing packages were found, PKG_ASLR_PIE:=0 should be added to their Makefiles. Original Work by: Yongkui Han <yonhan@cisco.com> Signed-off-by: Julien Dusser <julien.dusser@free.fr>