1. 06 Apr, 2015 1 commit
  2. 16 Mar, 2015 1 commit
  3. 12 Mar, 2015 1 commit
  4. 06 Feb, 2015 1 commit
  5. 05 Feb, 2015 1 commit
  6. 28 Jan, 2015 1 commit
  7. 17 Jan, 2015 1 commit
    • John Crispin's avatar
      Support for building an hardened OpenWRT · 491f3fc0
      John Crispin authored
      
      
      Introduce configuration options to build an "hardened" OpenWRT.
      
      Options to enable Stack-Smashing Protection, FORTIFY_SOURCE and RELRO
      have been introduced.
      
      uClibc makefile now automatically detects if SSP support is necessary.
      
      hostapd makefile has been fixed to use "^" as sed separator since
      using a comma was problematic when using "-Wl,-z,now" and the like in
      TARGET_CFLAGS.
      
      Currently enabling SSP on user space depends on enabling SSP kernel
      side, this is due to the fact that TARGET_CFLAGS are used to build
      kernel modules (at least). Suggestions on how to avoid this are welcome.
      Using "select" instead of "depends on" doesn't seem to work with choice
      entries.
      
      Tested with a lantiq (WBMR) router, GCC 4.8, uClibc and a subset of
      the available packages.
      Needs to be tested with GCC 4.9 and the remaining packages.
      PIE not currently included.
      Signed-off-by: default avatarAlessandro Di Federico <ale+owrt@clearmind.me>
      
      SVN-Revision: 44005
      491f3fc0
  8. 13 Sep, 2014 1 commit
  9. 25 Aug, 2014 1 commit
  10. 22 Nov, 2013 1 commit