From d76424428b270281e0925d98d7a1152e8641d94d Mon Sep 17 00:00:00 2001 From: Robert Schwebel Date: Thu, 11 Mar 2021 07:48:58 +0100 Subject: platforms: enable more toolchain hardening options It is recommended to enable these options. Signed-off-by: Robert Schwebel --- configs/platform-rpi/platformconfig | 2 +- configs/platform-v8a/platformconfig | 2 +- configs/platform-x86_64/platformconfig | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) (limited to 'configs') diff --git a/configs/platform-rpi/platformconfig b/configs/platform-rpi/platformconfig index 89fbdb2..152f41c 100644 --- a/configs/platform-rpi/platformconfig +++ b/configs/platform-rpi/platformconfig @@ -87,7 +87,7 @@ PTXCONF_TARGET_HARDEN_FORTIFY=y PTXCONF_TARGET_HARDEN_RELRO=y PTXCONF_TARGET_HARDEN_BINDNOW=y PTXCONF_TARGET_HARDEN_PIE=y -# PTXCONF_TARGET_HARDEN_GLIBCXX_ASSERTIONS is not set +PTXCONF_TARGET_HARDEN_GLIBCXX_ASSERTIONS=y # end of hardening options # diff --git a/configs/platform-v8a/platformconfig b/configs/platform-v8a/platformconfig index ac81bf9..a08cf84 100644 --- a/configs/platform-v8a/platformconfig +++ b/configs/platform-v8a/platformconfig @@ -86,7 +86,7 @@ PTXCONF_TARGET_HARDEN_FORTIFY=y PTXCONF_TARGET_HARDEN_RELRO=y PTXCONF_TARGET_HARDEN_BINDNOW=y PTXCONF_TARGET_HARDEN_PIE=y -# PTXCONF_TARGET_HARDEN_GLIBCXX_ASSERTIONS is not set +PTXCONF_TARGET_HARDEN_GLIBCXX_ASSERTIONS=y # end of hardening options # diff --git a/configs/platform-x86_64/platformconfig b/configs/platform-x86_64/platformconfig index eb45e06..fecfddc 100644 --- a/configs/platform-x86_64/platformconfig +++ b/configs/platform-x86_64/platformconfig @@ -85,12 +85,12 @@ PTXCONF_COMPILER_PREFIX_BOOTLOADER="${PTXCONF_COMPILER_PREFIX}" PTXCONF_TARGET_HARDEN_STACK=y # PTXCONF_TARGET_HARDEN_STACK_STRONG is not set # PTXCONF_TARGET_HARDEN_STACK_ALL is not set -# PTXCONF_TARGET_HARDEN_STACKCLASH is not set +PTXCONF_TARGET_HARDEN_STACKCLASH=y PTXCONF_TARGET_HARDEN_FORTIFY=y PTXCONF_TARGET_HARDEN_RELRO=y PTXCONF_TARGET_HARDEN_BINDNOW=y PTXCONF_TARGET_HARDEN_PIE=y -# PTXCONF_TARGET_HARDEN_GLIBCXX_ASSERTIONS is not set +PTXCONF_TARGET_HARDEN_GLIBCXX_ASSERTIONS=y # end of hardening options # -- cgit v1.2.3