Skip to content

Commit f0cd601

Browse files
committed
Revert "hardening: Disable GCC randstruct for COMPILE_TEST"
This reverts commit f5c68a4. It is again possible to build "allmodconfig" with the randstruct GCC plugin, so enable it for COMPILE_TEST to catch future bugs. Signed-off-by: Kees Cook <[email protected]>
1 parent f55aef7 commit f0cd601

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

security/Kconfig.hardening

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -344,7 +344,7 @@ config CC_HAS_RANDSTRUCT
344344

345345
choice
346346
prompt "Randomize layout of sensitive kernel structures"
347-
default RANDSTRUCT_FULL if COMPILE_TEST && CC_HAS_RANDSTRUCT
347+
default RANDSTRUCT_FULL if COMPILE_TEST && (GCC_PLUGINS || CC_HAS_RANDSTRUCT)
348348
default RANDSTRUCT_NONE
349349
help
350350
If you enable this, the layouts of structures that are entirely

0 commit comments

Comments
 (0)