From: Oleksij Rempel <o.rempel@pengutronix.de>
To: distrokit@pengutronix.de
Cc: Oleksij Rempel <o.rempel@pengutronix.de>
Subject: [DistroKit] [PATCH v2 13/13] MIPS: enable HARDEN_STACKCLASH
Date: Fri, 24 Apr 2020 09:08:53 +0200 [thread overview]
Message-ID: <20200424070853.20792-13-o.rempel@pengutronix.de> (raw)
In-Reply-To: <20200424070853.20792-1-o.rempel@pengutronix.de>
Generate code to prevent stack clash style attacks. When this option is
enabled, the compiler will only allocate one page of stack space at a
time and each page is accessed immediately after allocation. Thus, it
prevents allocations from jumping over any stack guard page provided by
the operating system.
Most targets do not fully support stack clash protection. However, on
those targets -fstack-clash-protection will protect dynamic stack
allocations. -fstack-clash-protection may also provide limited
protection for static stack allocations if the target supports
-fstack-check=specific.
Signed-off-by: Oleksij Rempel <o.rempel@pengutronix.de>
---
configs/platform-mips/platformconfig | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/configs/platform-mips/platformconfig b/configs/platform-mips/platformconfig
index 47c9cd2..5f1202b 100644
--- a/configs/platform-mips/platformconfig
+++ b/configs/platform-mips/platformconfig
@@ -77,7 +77,7 @@ PTXCONF_COMPILER_PREFIX_BOOTLOADER="${PTXCONF_COMPILER_PREFIX}"
# PTXCONF_TARGET_HARDEN_STACK is not set
# PTXCONF_TARGET_HARDEN_STACK_STRONG is not set
PTXCONF_TARGET_HARDEN_STACK_ALL=y
-# PTXCONF_TARGET_HARDEN_STACKCLASH is not set
+PTXCONF_TARGET_HARDEN_STACKCLASH=y
PTXCONF_TARGET_HARDEN_FORTIFY=y
PTXCONF_TARGET_HARDEN_RELRO=y
PTXCONF_TARGET_HARDEN_BINDNOW=y
--
2.26.1
_______________________________________________
DistroKit mailing list
DistroKit@pengutronix.de
prev parent reply other threads:[~2020-04-24 7:08 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-04-24 7:08 [DistroKit] [PATCH v2 01/13] MIPS: kernel: enable i2c support Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 02/13] MIPS: kernel: enable USB support Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 03/13] MIPS: kernel: enable CPU_IDLE support Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 04/13] MIPS: kernel: enable EXT4 and VFAT FS support Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 05/13] MIPS: kernel: malta: disable dummy driver Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 06/13] MIPS: kernel: malta: disable devmem support Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 07/13] MIPS: kernel: malta: enable PREEMPT support Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 08/13] MIPS: kernel: malta: disable unused functions CPU_ISOLATION and CONNECTOR Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 09/13] MIPS: kernel: malta: disable unused name spaces Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 10/13] MIPS: kernel: malta: disable SYSTEM_TRUSTED_KEYRING and WiFI support Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 11/13] MIPS: malta: fix qemu run script Oleksij Rempel
2020-04-24 7:08 ` [DistroKit] [PATCH v2 12/13] MIPS: enable GLIBCXX_ASSERTION Oleksij Rempel
2020-04-24 7:08 ` Oleksij Rempel [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200424070853.20792-13-o.rempel@pengutronix.de \
--to=o.rempel@pengutronix.de \
--cc=distrokit@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox