aboutsummaryrefslogtreecommitdiff
path: root/utils
diff options
context:
space:
mode:
authorGravatar Matt Weber <matthew.weber@rockwellcollins.com>2019-10-27 11:13:24 -0500
committerGravatar Thomas Petazzoni <thomas.petazzoni@bootlin.com>2019-10-27 20:20:41 +0100
commit17eb6ae92a06e0389b439c499bb962e673bf5724 (patch)
tree10cbe1a3e403a2cedbc77fa4f10567acf2e769a7 /utils
parent22d37003c796daff98e63be61144814f8221df87 (diff)
downloadbuildroot-17eb6ae92a06e0389b439c499bb962e673bf5724.tar.gz
buildroot-17eb6ae92a06e0389b439c499bb962e673bf5724.tar.bz2
utils/genrandconfig: test full set of hardening options
This patch adds the remaining ssp and relro cases plus both of the fortify options. The randomization was left consistant between the options but the order of the conditions placed the most restrictive hardening options with more priority. Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Diffstat (limited to 'utils')
-rwxr-xr-xutils/genrandconfig10
1 files changed, 10 insertions, 0 deletions
diff --git a/utils/genrandconfig b/utils/genrandconfig
index 4308261932..aaba6c4204 100755
--- a/utils/genrandconfig
+++ b/utils/genrandconfig
@@ -370,8 +370,18 @@ def gen_config(args):
configlines.append("BR2_PIC_PIE=y\n")
if randint(0, 4) == 0:
configlines.append("BR2_RELRO_FULL=y\n")
+ elif randint(0, 4) == 0:
+ configlines.append("BR2_RELRO_PARTIAL=y\n")
if randint(0, 4) == 0:
configlines.append("BR2_SSP_ALL=y\n")
+ elif randint(0, 4) == 0:
+ configlines.append("BR2_SSP_REGULAR=y\n")
+ elif randint(0, 4) == 0:
+ configlines.append("BR2_SSP_STRONG=y\n")
+ if randint(0, 4) == 0:
+ configlines.append("BR2_FORTIFY_SOURCE_2=y\n")
+ elif randint(0, 4) == 0:
+ configlines.append("BR2_FORTIFY_SOURCE_1=y\n")
# Randomly enable BR2_REPRODUCIBLE 10% of times
# also enable tar filesystem images for testing