summaryrefslogtreecommitdiffstats
path: root/platforms/toolchain_hardening.in
diff options
context:
space:
mode:
Diffstat (limited to 'platforms/toolchain_hardening.in')
-rw-r--r--platforms/toolchain_hardening.in21
1 files changed, 21 insertions, 0 deletions
diff --git a/platforms/toolchain_hardening.in b/platforms/toolchain_hardening.in
new file mode 100644
index 000000000..54d751e30
--- /dev/null
+++ b/platforms/toolchain_hardening.in
@@ -0,0 +1,21 @@
+## SECTION=architecture_options
+
+menu "hardening options "
+
+config TARGET_HARDEN_STACK
+ bool
+ prompt "Enable stack protector (cc -fstack-protector)"
+
+config TARGET_HARDEN_FORTIFY
+ bool
+ prompt "Enable glibc protections (cc -D_FORTIFY_SOURCE=2)"
+
+config TARGET_HARDEN_RELRO
+ bool
+ prompt "Enable 'RELocation Read-Only' (ld -z relro)"
+
+config TARGET_HARDEN_BINDNOW
+ bool
+ prompt "Enable 'Bind Now' (ld -z now)"
+
+endmenu