enable PKG_ASLR_PIE to harden the software

this option was added in df0bd42fdeb76c9bc51b816c3df699db123c0024. Introduce a configuration option to build a "hardened" OpenWrt with ASLR PIE support. Add new option PKG_ASLR_PIE to enable Address Space Layout Randomization (ASLR) by building Position Independent Executables (PIE). This new option protects against "return-to-text" attacks.
freifunk-berlin · May 27, 2018 · c271bc0 · c271bc0
1 parent 962ce24
commit c271bc0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/configs/common.config b/configs/common.config
@@ -198,6 +198,7 @@ CONFIG_PACKAGE_uhttpd-mod-ubus=m
 CONFIG_PACKAGE_vnstat=m
 CONFIG_PACKAGE_wpad=m
 CONFIG_PACKAGE_zlib=m
+CONFIG_PKG_ASLE_PIE=y
 CONFIG_PREINITOPT=y
 CONFIG_SDK=y
 CONFIG_STRIP_KERNEL_EXPORTS=y