From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: From: Michael Olbrich Date: Thu, 19 Sep 2019 17:21:02 +0200 Message-Id: <20190919152103.23019-5-m.olbrich@pengutronix.de> In-Reply-To: <20190919152103.23019-1-m.olbrich@pengutronix.de> References: <20190919152103.23019-1-m.olbrich@pengutronix.de> MIME-Version: 1.0 Subject: [DistroKit] [PATCH 4/5] platform-v7a: use -fstack-protector-strong List-Id: DistroKit Mailinglist List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: distrokit-bounces@pengutronix.de Sender: "DistroKit" To: distrokit@pengutronix.de Cc: Michael Olbrich It's better than -fstack-protector and has similar overhead. Signed-off-by: Michael Olbrich --- configs/platform-v7a/platformconfig | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/configs/platform-v7a/platformconfig b/configs/platform-v7a/platformconfig index be4e83e3736d..766e8414a774 100644 --- a/configs/platform-v7a/platformconfig +++ b/configs/platform-v7a/platformconfig @@ -77,8 +77,8 @@ PTXCONF_COMPILER_PREFIX_BOOTLOADER="${PTXCONF_COMPILER_PREFIX}" # hardening options # # PTXCONF_TARGET_HARDEN_STACK_NONE is not set -PTXCONF_TARGET_HARDEN_STACK=y -# PTXCONF_TARGET_HARDEN_STACK_STRONG is not set +# PTXCONF_TARGET_HARDEN_STACK is not set +PTXCONF_TARGET_HARDEN_STACK_STRONG=y # PTXCONF_TARGET_HARDEN_STACK_ALL is not set PTXCONF_TARGET_HARDEN_STACKCLASH=y PTXCONF_TARGET_HARDEN_FORTIFY=y -- 2.20.1 _______________________________________________ DistroKit mailing list DistroKit@pengutronix.de