Difference between revisions of "Buildroot:SecurityHardening"

From eLinux.org
Jump to: navigation, search
 
(4 intermediate revisions by the same user not shown)
Line 1: Line 1:
  
Buildroot has a random configuration generator that creates a build configuration for regression testing of different combinations of packages. This configuration generator has been updated to randomly include different hardening options.
+
The Buildroot [https://buildroot.org/downloads/manual/manual.html#_analyzing_and_fixing_autobuild_failures autobuilders] have been updated to randomly include different hardening options. The filters below provide the latest status for each of the different options being tested.
 
 
'''Autobuilder Failures'''
 
  
 
[[http://autobuild.buildroot.net/index.php?status=NOK&symbols%5BBR2_PIC_PIE%5D=y BR2_PIC_PIE]]
 
[[http://autobuild.buildroot.net/index.php?status=NOK&symbols%5BBR2_PIC_PIE%5D=y BR2_PIC_PIE]]
Line 21: Line 19:
  
  
'''Open Topics'''
 
  
*
+
 
 +
'''References'''
 +
 
 +
* https://wiki.debian.org/Hardening
 +
* https://wiki.gentoo.org/wiki/Hardened/Toolchain
 +
* https://wiki.ubuntu.com/ToolChain/CompilerFlags

Latest revision as of 09:50, 27 October 2019

The Buildroot autobuilders have been updated to randomly include different hardening options. The filters below provide the latest status for each of the different options being tested.

[BR2_PIC_PIE]

[BR2_RELRO_PARTIAL]

[BR2_RELRO_FULL]

[BR2_SSP_REGULAR]

[BR2_SSP_STRONG]

[BR2_SSP_ALL]

[BR2_FORTIFY_SOURCE_1]

[BR2_FORTIFY_SOURCE_2]



References