openwrt/upstream - upstream openwrt

	Commit message (Collapse)	Author	Age	Files	Lines
*	build: add hardened builds with PIE (ASLR) support	Julien Dusser	2018-01-27	1	-0/+7
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Introduce a configuration option to build a "hardened" OpenWrt with ASLR PIE support. Add new option PKG_ASLR_PIE to enable Address Space Layout Randomization (ASLR) by building Position Independent Executables (PIE). This new option protects against "return-to-text" attacks. Busybox need a special care, link is done with ld, not gcc, leading to unknown flags. Set BUSYBOX_DEFAULT_PIE instead and disable PKG_ASLR_PIE. If other failing packages were found, PKG_ASLR_PIE:=0 should be added to their Makefiles. Original Work by: Yongkui Han <yonhan@cisco.com> Signed-off-by: Julien Dusser <julien.dusser@free.fr>
*	hardening: make override variables more intuitive	Steven Barth	2015-06-24	1	-12/+9
\| \| \| \| \| \|	Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46119
*	gcc/musl: rework SSP-support	Steven Barth	2015-06-22	1	-2/+0
\| \| \| \| \| \| \| \| \| \| \|	Make musl provide libssp_nonshared.a and make GCC link it unconditionally if musl is used. This should be a no-op if SSP is disabled and seems to be the only reliable way of dealing with SSP over all packages due to the mess that is linkerflags handling in packages. Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46108
*	buildroot: move hardening options into separate file	Steven Barth	2015-06-20	1	-0/+55
	Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46070