Skip to content
Snippets Groups Projects
  1. Jan 27, 2018
    • Julien Dusser's avatar
      build: add hardened builds with PIE (ASLR) support · df0bd42f
      Julien Dusser authored
      
      Introduce a configuration option to build a "hardened" OpenWrt with
      ASLR PIE support.
      
      Add new option PKG_ASLR_PIE to enable Address Space Layout Randomization (ASLR)
      by building Position Independent Executables (PIE). This new option protects
      against "return-to-text" attacks.
      
      Busybox need a special care, link is done with ld, not gcc, leading to
      unknown flags. Set BUSYBOX_DEFAULT_PIE instead and disable PKG_ASLR_PIE.
      
      If other failing packages were found, PKG_ASLR_PIE:=0 should be added to
      their Makefiles.
      
      Original Work by: Yongkui Han <yonhan@cisco.com>
      Signed-off-by: default avatarJulien Dusser <julien.dusser@free.fr>
      df0bd42f
Loading