You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
openwrt/include
Hauke Mehrtens 19cbac7d26 buildsystem: Make PIE ASLR option tristate
This tristate choose allows to select to build only some applications
with PIE enabled. On MIPS binaries are getting about 30% bigger when PIE
is activated for the, which is a huge increase.

Network exposed applications like dnsmasq should then be build with PIE
enabled, but some applications which are normally not parsing data from
the network do not have it activated. The regular option should give a
good trade off between extra flash and RAM memory usage and security.

This changes the default from building no applications with PIE to build
some specifically marked applications with PIE enabled. This option is
only activated for targets with bigger flash and RAM to not consume
extra memory on the very small targets. On SDK builds the Regular option
should always be selected, because some tiny targets share the
applications with big targets and only the images for the tiny targets
should contain the none PIE applications, but the images for the normal
targets should use PIE. The shared packages should always use PIE when
it should be normally activated.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Acked-by: Petr Štetiar <ynezz@true.cz>
4 years ago
..
site Revert faulty tree push 5 years ago
autotools.mk autotools.mk: autoreconf: fix missing install-sh 5 years ago
cmake.mk cmake: Install host packages to lib instead of lib64 4 years ago
debug.mk include: remove trailing whitespaces 9 years ago
depends.mk build: add missing wildcard for ignoring .pkgdir in dependency checks 7 years ago
device_table.txt image: ensure that /dev/console exist in rootfs images 11 years ago
download.mk build: add PKG_SOURCE_URL_FILE support 5 years ago
feeds.mk build: suppress error output in feeds.mk 5 years ago
hardened-ld-pie.specs build: add hardened builds with PIE (ASLR) support 6 years ago
hardening.mk buildsystem: Make PIE ASLR option tristate 4 years ago
host-build.mk build: call Host/Uninstall before wiping the host build dir 5 years ago
image-commands.mk treewide: move mktplinkfw to tplink-v1-image in image-commands.mk 4 years ago
image-legacy.mk image: fix ar71xx legacy images 7 years ago
image.mk build: image: add SOC device variable 4 years ago
kernel-build.mk kernel-build: ignore runtime config options during reconfig 5 years ago
kernel-defaults.mk kernel-defaults: ensure SOURCE_DATE_EPOCH on /init 5 years ago
kernel-version.mk kernel: remove support for kernel 4.9 4 years ago
kernel.mk kernel.mk: add KCFLAGS to make kmods reproducible 5 years ago
netfilter.mk netfilter: add back nft_hash 4 years ago
nls.mk treewide: fix build depends to refer to source package names 6 years ago
package-bin.mk build: use if-then to avoid non-zero return codes in bin/ packaging code 7 years ago
package-defaults.mk include/package-defaults.mk: fix default Build/Prepare with empty ./src 6 years ago
package-dumpinfo.mk build: expose ABI version in .packageauxvars 5 years ago
package-ipkg.mk build: warn when packages have no associated install section 5 years ago
package-seccomp.mk include: add a seccomp filter install wrapper 9 years ago
package.mk Revert faulty tree push 5 years ago
prereq-build.mk build: prereq: add support for Python 3.8 5 years ago
prereq.mk build: cleanup possibly dangling Python 2 host symlink 5 years ago
quilt.mk build: Use LINUX_DIR for Kernel/Patch 5 years ago
rootfs.mk rootfs.mk: ensure all timestamp are set to SOURCE_DATE_EPOCH 5 years ago
scan.awk build: propagate override information to .packageinfo 9 years ago
scan.mk build: have scripts/feeds honor all toplevel .mk-files of a feed 5 years ago
shell.sh build: use mkhash to replace various quirky md5sum/openssl calls 7 years ago
subdir.mk build: remove GNU time dependency 6 years ago
target.mk build: add urandom-seed and urngd to default packages set 5 years ago
toolchain-build.mk toolchain: Include hardening.mk for toolchain build 5 years ago
toplevel.mk build: fix host menu config targets using ncurses 5 years ago
u-boot.mk u-boot.mk: use openwrt url instead of lede project 5 years ago
uclibc++.mk libcxx: Add package 4 years ago
unpack.mk include: unpack.mk: remove CRLF_WORKAROUND 5 years ago
verbose.mk include/verbose.mk: Add sc to failure message 6 years ago
version.mk version.mk: use https:// instead of http:// 5 years ago