diff --git a/configs/common/hardening b/configs/common/hardening index f3a538ebd2f4d536bd2bde28d652aa6dfeb6ef7c..66f73a0f1de7aab4d9c17265ad559da82f9e0bd7 100644 --- a/configs/common/hardening +++ b/configs/common/hardening @@ -8,5 +8,8 @@ CONFIG_PKG_FORTIFY_SOURCE_2=y CONFIG_KERNEL_CC_STACKPROTECTOR_STRONG=y CONFIG_PKG_CC_STACKPROTECTOR_STRONG=y +# Enable Stack-Smashing Protection for every executable build +CONFIG_GCC_DEFAULT_SSP=y + # Enable seccomp in kernel to use procd-seccomp CONFIG_LXC_SECCOMP=y