|
@@ -712,6 +712,13 @@ endmenu
|
|
|
|
|
|
comment "Security Hardening Options"
|
|
|
|
|
|
+config BR2_PIC_PIE
|
|
|
+ bool "Build code with PIC/PIE"
|
|
|
+ depends on BR2_SHARED_LIBS
|
|
|
+ help
|
|
|
+ Generate Position-Independent Code (PIC) and link
|
|
|
+ Position-Independent Executables (PIE).
|
|
|
+
|
|
|
choice
|
|
|
bool "Stack Smashing Protection"
|
|
|
default BR2_SSP_ALL if BR2_ENABLE_SSP # legacy
|
|
@@ -794,6 +801,7 @@ config BR2_RELRO_PARTIAL
|
|
|
|
|
|
config BR2_RELRO_FULL
|
|
|
bool "Full"
|
|
|
+ select BR2_PIC_PIE
|
|
|
help
|
|
|
This option includes the partial configuration, but also marks
|
|
|
the GOT as read-only at the cost of initialization time during
|