Skip to content
Snippets Groups Projects
Verified Commit fa7eeafd authored by Jan Pavlinec's avatar Jan Pavlinec
Browse files

configs/common/hardening: enable SSP for executables by default

parent 17bbe91f
Branches hardening
1 merge request!238configs/common/hardening: enable SSP for executables by default
......@@ -8,6 +8,9 @@ CONFIG_PKG_FORTIFY_SOURCE_2=y
CONFIG_KERNEL_CC_STACKPROTECTOR_STRONG=y
CONFIG_PKG_CC_STACKPROTECTOR_STRONG=y
# Enable Stack-Smashing Protection for every executable build
CONFIG_GCC_DEFAULT_SSP=y
# Enable seccomp in kernel to use procd-seccomp
CONFIG_KERNEL_SECCOMP=n
CONFIG_LXC_SECCOMP=y
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment