hardening: enable RELRO by default

Signed-off-by: Steven Barth <steven@midlink.org>
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@46004 3c298f89-4303-0410-b956-a3cf2f4a3e73

diff --git a/config/Config-build.in b/config/Config-build.in
index 82ec0d6..0584820 100644 (file)
--- a/config/Config-build.in
+++ b/config/Config-build.in
@@ -270,6 +270,7 @@ menu "Global build settings"
 
        choice
                prompt "Enable RELRO protection"
+               default PKG_RELRO_FULL
                help
                  Enable a link-time protection known as RELRO (Relocation Read Only)
                  which helps to protect from certain type of exploitation techniques