hardening: enable regular SSP support by default

Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 46020

diff --git a/config/Config-build.in b/config/Config-build.in
index 0584820cddfd8bd6285c1a52fcb0088e9cd5d16e..42b8e8e5e3acb27e17a832ef6359b43ccc38b955 100644 (file)
--- a/config/Config-build.in
+++ b/config/Config-build.in
@@ -219,7 +219,7 @@ menu "Global build settings"
 
        choice
                prompt "User space Stack-Smashing Protection"
-               default PKG_CC_STACKPROTECTOR_NONE
+               default PKG_CC_STACKPROTECTOR_REGULAR
                help
                  Enable GCC Stack Smashing Protection (SSP) for userspace applications
                config PKG_CC_STACKPROTECTOR_NONE
@@ -237,7 +237,7 @@ menu "Global build settings"
 
        choice
                prompt "Kernel space Stack-Smashing Protection"
-               default KERNEL_CC_STACKPROTECTOR_NONE
+               default KERNEL_CC_STACKPROTECTOR_REGULAR
                help
                  Enable GCC Stack-Smashing Protection (SSP) for the kernel
                config KERNEL_CC_STACKPROTECTOR_NONE

diff --git a/toolchain/gcc/Config.in b/toolchain/gcc/Config.in
index d8141815fb802d075fb0ff542ce19206445aafc4..274b97c9b8ca0732df9e85aa5eefd9da8163767d 100644 (file)
--- a/toolchain/gcc/Config.in
+++ b/toolchain/gcc/Config.in
@@ -41,7 +41,7 @@ config EXTRA_GCC_CONFIG_OPTIONS
 config SSP_SUPPORT
        bool
        prompt "Enable Stack-Smashing Protection support" if TOOLCHAINOPTS
-       default n
+       default y
        help
            Enable Stack-Smashing Protection support