mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-30 22:26:55 +00:00
x86: if stackprotector is enabled, thn use stack-protector-all by default
also enable the rodata and nx tests. Signed-off-by: Ingo Molnar <mingo@elte.hu> Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
This commit is contained in:
parent
5cb273013e
commit
72370f2a5b
2 changed files with 3 additions and 1 deletions
|
@ -1142,7 +1142,7 @@ config SECCOMP
|
||||||
|
|
||||||
config CC_STACKPROTECTOR
|
config CC_STACKPROTECTOR
|
||||||
bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)"
|
bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)"
|
||||||
depends on X86_64 && EXPERIMENTAL && BROKEN
|
depends on X86_64
|
||||||
help
|
help
|
||||||
This option turns on the -fstack-protector GCC feature. This
|
This option turns on the -fstack-protector GCC feature. This
|
||||||
feature puts, at the beginning of critical functions, a canary
|
feature puts, at the beginning of critical functions, a canary
|
||||||
|
@ -1159,6 +1159,7 @@ config CC_STACKPROTECTOR
|
||||||
config CC_STACKPROTECTOR_ALL
|
config CC_STACKPROTECTOR_ALL
|
||||||
bool "Use stack-protector for all functions"
|
bool "Use stack-protector for all functions"
|
||||||
depends on CC_STACKPROTECTOR
|
depends on CC_STACKPROTECTOR
|
||||||
|
default y
|
||||||
help
|
help
|
||||||
Normally, GCC only inserts the canary value protection for
|
Normally, GCC only inserts the canary value protection for
|
||||||
functions that use large-ish on-stack buffers. By enabling
|
functions that use large-ish on-stack buffers. By enabling
|
||||||
|
|
|
@ -102,6 +102,7 @@ config DIRECT_GBPAGES
|
||||||
config DEBUG_RODATA_TEST
|
config DEBUG_RODATA_TEST
|
||||||
bool "Testcase for the DEBUG_RODATA feature"
|
bool "Testcase for the DEBUG_RODATA feature"
|
||||||
depends on DEBUG_RODATA
|
depends on DEBUG_RODATA
|
||||||
|
default y
|
||||||
help
|
help
|
||||||
This option enables a testcase for the DEBUG_RODATA
|
This option enables a testcase for the DEBUG_RODATA
|
||||||
feature as well as for the change_page_attr() infrastructure.
|
feature as well as for the change_page_attr() infrastructure.
|
||||||
|
|
Loading…
Reference in a new issue