hardening: enable regular SSP support by default

Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46020
10 years ago · 19810a5145
parent 6585c532bd
commit 19810a5145
2 changed files with 3 additions and 3 deletions
--- a/config/Config-build.in
+++ b/config/Config-build.in
@ -219,7 +219,7 @@ menu "Global build settings"

 	choice
 		prompt "User space Stack-Smashing Protection"
-		default PKG_CC_STACKPROTECTOR_NONE
+		default PKG_CC_STACKPROTECTOR_REGULAR
 		help
 		  Enable GCC Stack Smashing Protection (SSP) for userspace applications
 		config PKG_CC_STACKPROTECTOR_NONE
@ -237,7 +237,7 @@ menu "Global build settings"

 	choice
 		prompt "Kernel space Stack-Smashing Protection"
-		default KERNEL_CC_STACKPROTECTOR_NONE
+		default KERNEL_CC_STACKPROTECTOR_REGULAR
 		help
 		  Enable GCC Stack-Smashing Protection (SSP) for the kernel
 		config KERNEL_CC_STACKPROTECTOR_NONE
--- a/toolchain/gcc/Config.in
+++ b/toolchain/gcc/Config.in
@ -41,7 +41,7 @@ config EXTRA_GCC_CONFIG_OPTIONS
 config SSP_SUPPORT
 	bool
 	prompt "Enable Stack-Smashing Protection support" if TOOLCHAINOPTS
-	default n
+	default y
 	help
 	    Enable Stack-Smashing Protection support