[OpenWrt-Devel] [PATCH 0/6] buildsystem: Activate PIE ASLR for some packages

Hauke Mehrtens hauke at hauke-m.de
Tue Jan 7 17:21:19 EST 2020


On 10/27/19 6:44 PM, Hauke Mehrtens wrote:
> This is a follow up patch on this discussion on the mailing list:
> https://patchwork.ozlabs.org/patch/1041647/
> 
> This allows to activate PIE only for some packages where we thing it is 
> necessary and not only globally for all of them.
> 
> Hauke Mehrtens (6):
>   buildsystem: Make PIE ASLR option tristate
>   dnsmasq: Activate PIE by default
>   dropbear: Activate PIE by default
>   hostapd: Activate PIE by default
>   uhttpd: Activate PIE by default
>   lantiq: Allow PKG_ASLR_PIE for DSL and voice drivers
> 
>  config/Config-build.in                       | 22 ++++++++++++++++----
>  include/hardening.mk                         |  9 +++++++-
>  package/kernel/lantiq/ltq-adsl/Makefile      |  1 -
>  package/kernel/lantiq/ltq-ifxos/Makefile     |  1 -
>  package/kernel/lantiq/ltq-tapi/Makefile      |  1 -
>  package/kernel/lantiq/ltq-vdsl-mei/Makefile  |  2 --
>  package/kernel/lantiq/ltq-vdsl/Makefile      |  1 -
>  package/kernel/lantiq/ltq-vmmc/Makefile      |  1 -
>  package/network/config/ltq-vdsl-app/Makefile |  1 -
>  package/network/services/dnsmasq/Makefile    |  1 +
>  package/network/services/dropbear/Makefile   |  1 +
>  package/network/services/hostapd/Makefile    |  1 +
>  package/network/services/uhttpd/Makefile     |  1 +
>  13 files changed, 30 insertions(+), 13 deletions(-)
> 

Hi,

I would like to apply these patches to master?

Are there any objections to this? I already activated LTO to reduce the
size for all these components and the lantiq patch is already applied.

Hauke

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.infradead.org/pipermail/openwrt-devel/attachments/20200107/2ab71277/attachment.sig>
-------------- next part --------------
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel


More information about the openwrt-devel mailing list