| Message ID | 20191027161324.15946-1-matthew.weber@rockwellcollins.com |
|---|---|
| State | Accepted |
| Headers | show |
| Series | utils/genrandconfig: test full set of hardening options | expand |
On Sun, 27 Oct 2019 11:13:24 -0500 Matt Weber <matthew.weber@rockwellcollins.com> wrote: > This patch adds the remaining ssp and relro cases plus both of the > fortify options. The randomization was left consistant between the > options but the order of the conditions placed the most restrictive > hardening options with more priority. > > Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com> > Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> > --- > NOTE: These other two need to be applied first. > http://patchwork.ozlabs.org/patch/1184843/ > http://patchwork.ozlabs.org/patch/1184842 > --- > utils/genrandconfig | 10 ++++++++++ > 1 file changed, 10 insertions(+) Applied to master, thanks. Thomas
diff --git a/utils/genrandconfig b/utils/genrandconfig index 4308261932..aaba6c4204 100755 --- a/utils/genrandconfig +++ b/utils/genrandconfig @@ -370,8 +370,18 @@ def gen_config(args): configlines.append("BR2_PIC_PIE=y\n") if randint(0, 4) == 0: configlines.append("BR2_RELRO_FULL=y\n") + elif randint(0, 4) == 0: + configlines.append("BR2_RELRO_PARTIAL=y\n") if randint(0, 4) == 0: configlines.append("BR2_SSP_ALL=y\n") + elif randint(0, 4) == 0: + configlines.append("BR2_SSP_REGULAR=y\n") + elif randint(0, 4) == 0: + configlines.append("BR2_SSP_STRONG=y\n") + if randint(0, 4) == 0: + configlines.append("BR2_FORTIFY_SOURCE_2=y\n") + elif randint(0, 4) == 0: + configlines.append("BR2_FORTIFY_SOURCE_1=y\n") # Randomly enable BR2_REPRODUCIBLE 10% of times # also enable tar filesystem images for testing
This patch adds the remaining ssp and relro cases plus both of the fortify options. The randomization was left consistant between the options but the order of the conditions placed the most restrictive hardening options with more priority. Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> --- NOTE: These other two need to be applied first. http://patchwork.ozlabs.org/patch/1184843/ http://patchwork.ozlabs.org/patch/1184842 --- utils/genrandconfig | 10 ++++++++++ 1 file changed, 10 insertions(+)