Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"

This reverts commit 5dda1324be421c1a2afd5a559a87f97691287003.

Presumably this was done to work around build errors or something but it
works fine now.
This commit is contained in:
Joachim Fasting 2019-01-05 13:10:05 +01:00
parent e36c93b3a0
commit c68e8b05f0
No known key found for this signature in database
GPG Key ID: 5C204DF675C90294

@ -117,6 +117,11 @@ ${optionalString (versionAtLeast version "4.20") ''
GCC_PLUGIN_STACKLEAK y # A port of the PaX stackleak plugin
''}
${optionalString (versionAtLeast version "4.13") ''
GCC_PLUGIN_RANDSTRUCT y # A port of the PaX randstruct plugin
GCC_PLUGIN_RANDSTRUCT_PERFORMANCE y
''}
# Disable various dangerous settings
ACPI_CUSTOM_METHOD n # Allows writing directly to physical memory
PROC_KCORE n # Exposes kernel text image layout