[OpenWrt-Devel] hardened openwrt

Etienne Champetier champetier.etienne at gmail.com
Sun Feb 1 13:47:52 EST 2015


hi cmsv,

2015-02-01 13:40 GMT+01:00 cmsv <cmsv at wirelesspt.net>:

> Hello
> I was wondering if you would be able to tell me how many bytes do the
> final binaries get to be with hardened options versus without it.
> Do they enlarge much more ?
>
> On 02/01/2015 07:34 AM, Etienne Champetier wrote:
> >> PKG_CC_STACKPROTECTOR_STRONG
> >> KERNEL_CC_STACKPROTECTOR_STRONG
> >> PKG_FORTIFY_SOURCE_2
> >> PKG_RELRO_FULL
>

I haven't check that all packages are compiled properly (some packages
might overwrite the compilation flags or ...),
but just activating these options (and using gcc 4.9 in both case),
my sysupgrade image go from 6356992 to 6422528

see http://pastebin.com/eirgSC3J for more numbers

Regards
Etienne
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.infradead.org/pipermail/openwrt-devel/attachments/20150201/c6b62793/attachment.htm>
-------------- next part --------------
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel


More information about the openwrt-devel mailing list