From 11b8f6eb0e1cd41b216e243c5a2b026a17bbcfcd Mon Sep 17 00:00:00 2001 From: BtbN Date: Fri, 14 May 2021 14:52:26 +0200 Subject: [PATCH] Enable hardening by default in Linux toolchain --- images/base-linux64/ct-ng-config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/images/base-linux64/ct-ng-config b/images/base-linux64/ct-ng-config index e082306..0a29482 100644 --- a/images/base-linux64/ct-ng-config +++ b/images/base-linux64/ct-ng-config @@ -617,8 +617,8 @@ CT_GCC_4_8_or_later=y CT_CC_GCC_ENABLE_PLUGINS=y CT_CC_GCC_HAS_LIBMPX=y CT_CC_GCC_ENABLE_CXX_FLAGS="" -CT_CC_GCC_CORE_EXTRA_CONFIG_ARRAY="" -CT_CC_GCC_EXTRA_CONFIG_ARRAY="" +CT_CC_GCC_CORE_EXTRA_CONFIG_ARRAY="--enable-default-pie --enable-default-ssp" +CT_CC_GCC_EXTRA_CONFIG_ARRAY="--enable-default-pie --enable-default-ssp" CT_CC_GCC_STATIC_LIBSTDCXX=y # CT_CC_GCC_SYSTEM_ZLIB is not set CT_CC_GCC_CONFIG_TLS=m