Skip to content
  • Hauke Mehrtens's avatar
    buildsystem: Make PIE ASLR option tristate · 19cbac7d
    Hauke Mehrtens authored
    
    
    This tristate choose allows to select to build only some applications
    with PIE enabled. On MIPS binaries are getting about 30% bigger when PIE
    is activated for the, which is a huge increase.
    
    Network exposed applications like dnsmasq should then be build with PIE
    enabled, but some applications which are normally not parsing data from
    the network do not have it activated. The regular option should give a
    good trade off between extra flash and RAM memory usage and security.
    
    This changes the default from building no applications with PIE to build
    some specifically marked applications with PIE enabled. This option is
    only activated for targets with bigger flash and RAM to not consume
    extra memory on the very small targets. On SDK builds the Regular option
    should always be selected, because some tiny targets share the
    applications with big targets and only the images for the tiny targets
    should contain the none PIE applications, but the images for the normal
    targets should use PIE. The shared packages should always use PIE when
    it should be normally activated.
    
    Signed-off-by: default avatarHauke Mehrtens <hauke@hauke-m.de>
    Acked-by: default avatarPetr Štetiar <ynezz@true.cz>
    19cbac7d