commit:     b3517f3682b17492aaae421d114cafbe9679b13c
Author:     Richard Yao <ryao <AT> gentoo <DOT> org>
AuthorDate: Tue Aug 11 20:55:38 2015 +0000
Commit:     Richard Yao <ryao <AT> gentoo <DOT> org>
CommitDate: Tue Aug 11 20:55:48 2015 +0000
URL:        https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=b3517f36

Revert "Disable stack protection by default"

This reverts commit 9a35d09be877f957c46fa374be9d2d3f0b3390ba.

The controversy was settled by explaining that
CONFIG_CC_STACKPROTECTOR_REGULAR is -fstack-protector, not
-fstack-protector-all.

 defaults/kernel-generic-config | 1 +
 1 file changed, 1 insertion(+)

diff --git a/defaults/kernel-generic-config b/defaults/kernel-generic-config
index 1092aa3..3738e47 100644
--- a/defaults/kernel-generic-config
+++ b/defaults/kernel-generic-config
@@ -4075,6 +4075,7 @@ CONFIG_RING_BUFFER_BENCHMARK=m
 # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set
 
 CONFIG_SECCOMP=y
+CONFIG_CC_STACKPROTECTOR_REGULAR=y
 CONFIG_HZ_1000=y
 CONFIG_NO_HZ=y
 CONFIG_NO_HZ_IDLE=y

Reply via email to