diff options
| author | Ingo Molnar <mingo@elte.hu> | 2008-02-13 16:15:34 +0100 |
|---|---|---|
| committer | Thomas Gleixner <tglx@linutronix.de> | 2008-05-26 16:15:32 +0200 |
| commit | 72370f2a5b227bd3817593a6b15ea3f53f51dfcb (patch) | |
| tree | ed11ab4fd3f5770ff4513194e0c647cd909aced4 /arch/x86/Kconfig | |
| parent | 5cb273013e182a35e7db614d3e20a144cba71e53 (diff) | |
| download | lwn-72370f2a5b227bd3817593a6b15ea3f53f51dfcb.tar.gz lwn-72370f2a5b227bd3817593a6b15ea3f53f51dfcb.zip | |
x86: if stackprotector is enabled, thn use stack-protector-all by default
also enable the rodata and nx tests.
Signed-off-by: Ingo Molnar <mingo@elte.hu>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Diffstat (limited to 'arch/x86/Kconfig')
| -rw-r--r-- | arch/x86/Kconfig | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig index dcbec34154cf..83d8392c1334 100644 --- a/arch/x86/Kconfig +++ b/arch/x86/Kconfig @@ -1142,7 +1142,7 @@ config SECCOMP config CC_STACKPROTECTOR bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)" - depends on X86_64 && EXPERIMENTAL && BROKEN + depends on X86_64 help This option turns on the -fstack-protector GCC feature. This feature puts, at the beginning of critical functions, a canary @@ -1159,6 +1159,7 @@ config CC_STACKPROTECTOR config CC_STACKPROTECTOR_ALL bool "Use stack-protector for all functions" depends on CC_STACKPROTECTOR + default y help Normally, GCC only inserts the canary value protection for functions that use large-ish on-stack buffers. By enabling |