openwrtv3/package
John Crispin 491f3fc048 Support for building an hardened OpenWRT
Introduce configuration options to build an "hardened" OpenWRT.

Options to enable Stack-Smashing Protection, FORTIFY_SOURCE and RELRO
have been introduced.

uClibc makefile now automatically detects if SSP support is necessary.

hostapd makefile has been fixed to use "^" as sed separator since
using a comma was problematic when using "-Wl,-z,now" and the like in
TARGET_CFLAGS.

Currently enabling SSP on user space depends on enabling SSP kernel
side, this is due to the fact that TARGET_CFLAGS are used to build
kernel modules (at least). Suggestions on how to avoid this are welcome.
Using "select" instead of "depends on" doesn't seem to work with choice
entries.

Tested with a lantiq (WBMR) router, GCC 4.8, uClibc and a subset of
the available packages.
Needs to be tested with GCC 4.9 and the remaining packages.
PIE not currently included.

Signed-off-by: Alessandro Di Federico <ale+owrt@clearmind.me>

SVN-Revision: 44005
2015-01-17 14:31:30 +00:00
..
base-files base-files: Add ucidef_set_led_timer to uci-defaults.sh 2015-01-17 13:58:14 +00:00
boot uboot-sunxi: fix bananapro target, update patch 2015-01-10 19:12:35 +00:00
devel package/binutils: actually support the target toolchain 2015-01-07 16:02:59 +00:00
firmware kernel: add staging r8188eu module (3.13) 2014-04-30 21:53:29 +00:00
kernel modules: Add kmod-w1-slave-ds2413 2015-01-17 13:58:09 +00:00
libs toolchain: Add libatomic when using external toolchain 2015-01-17 13:58:03 +00:00
network Support for building an hardened OpenWRT 2015-01-17 14:31:30 +00:00
system procd: fix console bringup on UML (again...) 2015-01-09 08:39:16 +00:00
utils fuse: update to 2.9.3 2015-01-11 22:15:03 +00:00
Makefile postinst trigger: the new postinst trigger broke IB 2014-09-16 11:56:19 +00:00