1ea4bbe255
In commit 3a26f0c6dbed ("profiles: security: Add the security profile")
several security related config options were introduced, some of them
depends on CONFIG_DEVEL enabled, like CONFIG_TOOLCHAINOPTS (and
CONFIG_GCC_DEFAULT_PIE).
So lets fix it by adding missing CONFIG_DEVEL=y config symbol into
security.yml profile.
References: PCF-558
Fixes: 3a26f0c6dbed ("profiles: security: Add the security profile")
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
13 lines
421 B
YAML
13 lines
421 B
YAML
---
|
|
description: Add compiler security features
|
|
diffconfig: |
|
|
CONFIG_DEVEL=y
|
|
CONFIG_JSON_CHECKSEC_MITIGATIONS_REPORT=y
|
|
CONFIG_BUSYBOX_DEFAULT_PIE=y
|
|
CONFIG_GCC_DEFAULT_PIE=y
|
|
CONFIG_KERNEL_CC_STACKPROTECTOR_STRONG=y
|
|
CONFIG_PKG_ASLR_PIE_ALL=y
|
|
CONFIG_PKG_CC_STACKPROTECTOR_STRONG=y
|
|
CONFIG_PKG_FORTIFY_SOURCE_2=y
|
|
CONFIG_TOOLCHAINOPTS=y
|