NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

utils/genrandconfig: test full set of hardening options

Browse Source 
This patch adds the remaining ssp and relro cases plus both of the
fortify options. The randomization was left consistant between the
options but the order of the conditions placed the most restrictive
hardening options with more priority.

Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This commit is contained in:
Matt Weber 2019-10-27 11:13:24 -05:00 committed by Thomas Petazzoni
parent 22d37003c7
commit 17eb6ae92a
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
utils/genrandconfig
View File

@ -370,8 +370,18 @@ def gen_config(args):
configlines.append("BR2_PIC_PIE=y\n")
if randint(0, 4) == 0:
configlines.append("BR2_RELRO_FULL=y\n")
elif randint(0, 4) == 0:
configlines.append("BR2_RELRO_PARTIAL=y\n")
if randint(0, 4) == 0:
configlines.append("BR2_SSP_ALL=y\n")
elif randint(0, 4) == 0:
configlines.append("BR2_SSP_REGULAR=y\n")
elif randint(0, 4) == 0:
configlines.append("BR2_SSP_STRONG=y\n")
if randint(0, 4) == 0:
configlines.append("BR2_FORTIFY_SOURCE_2=y\n")
elif randint(0, 4) == 0:
configlines.append("BR2_FORTIFY_SOURCE_1=y\n")
# Randomly enable BR2_REPRODUCIBLE 10% of times
# also enable tar filesystem images for testing