Re: [OpenWrt-Devel] Missing 'noexecstack' in uClibc MIPS builds

2014-10-03 Thread Andrew McDonnell
True. Perhaps that makes it a moot issue for BB. But I dont think it would hurt to be ahead of the curve in this day and age... I am not the only one adding this latent protection to MIPS: https://webrtc-codereview.appspot.com/994006/ https://gcc.gnu.org/ml/gcc-patches/2014-09/msg02430.html (s

Re: [OpenWrt-Devel] Missing 'noexecstack' in uClibc MIPS builds

2014-10-03 Thread Felix Fietkau
On 2014-10-03 19:14, Catalin Patulea wrote: > On Wed, Oct 1, 2014 at 6:42 PM, Andrew McDonnell > wrote: >> It seems that OpenWRT sets the relevant flag to require uClibc to build with >> NOEXECSTACK set. This is good. (For one introduction to NOEXECSTACK, see >> http://wiki.gentoo.org/wiki/Harden

Re: [OpenWrt-Devel] Missing 'noexecstack' in uClibc MIPS builds

2014-10-03 Thread Catalin Patulea
On Wed, Oct 1, 2014 at 6:42 PM, Andrew McDonnell wrote: > It seems that OpenWRT sets the relevant flag to require uClibc to build with > NOEXECSTACK set. This is good. (For one introduction to NOEXECSTACK, see > http://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart ) Does anything actually en

[OpenWrt-Devel] Missing 'noexecstack' in uClibc MIPS builds

2014-10-01 Thread Andrew McDonnell
Hi, I have been taking a look at some of the OpenWRT security hardening and discovered something puzzling. It seems that OpenWRT sets the relevant flag to require uClibc to build with NOEXECSTACK set. This is good. (For one introduction to NOEXECSTACK, see http://wiki.gentoo.org/wiki/Harden