From: Steven Barth Date: Tue, 16 Jun 2015 17:27:59 +0000 (+0000) Subject: hardening: enable format security checking by default X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=11489a85cfcadf6ac23d490bcad65ff8f55ea2bb;p=openwrt%2Fstaging%2Fdangole.git hardening: enable format security checking by default Signed-off-by: Steven Barth SVN-Revision: 46003 --- diff --git a/config/Config-build.in b/config/Config-build.in index 69fb708972..82ec0d6d0a 100644 --- a/config/Config-build.in +++ b/config/Config-build.in @@ -211,7 +211,7 @@ menu "Global build settings" config PKG_CHECK_FORMAT_SECURITY bool prompt "Enable gcc format-security" - default n + default y help Add -Wformat -Werror=format-security to the CFLAGS. You can disable this per package by adding PKG_CHECK_FORMAT_SECURITY:=0 in the package