Skip to content

[Security]: Enable hardening build options#10369

Merged
xumia merged 2 commits intosonic-net:masterfrom
xumia:enable-hardening-options
Apr 2, 2022
Merged

[Security]: Enable hardening build options#10369
xumia merged 2 commits intosonic-net:masterfrom
xumia:enable-hardening-options

Conversation

@xumia
Copy link
Collaborator

@xumia xumia commented Mar 28, 2022

Why I did it

See https://wiki.debian.org/Hardening

How I did it

How to verify it

Which release branch to backport (provide reason below if selected)

  • 201811
  • 201911
  • 202006
  • 202012
  • 202106
  • 202111

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

@xumia
Copy link
Collaborator Author

xumia commented Mar 30, 2022

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@xumia xumia merged commit 551dbfd into sonic-net:master Apr 2, 2022
@xumia xumia deleted the enable-hardening-options branch April 2, 2022 15:07
judyjoseph pushed a commit that referenced this pull request Apr 4, 2022
[Security]: Enable hardening build options
@saiarcot895
Copy link
Contributor

Looks like this setting won't have much of an impact, because DEB_BUILD_OPTIONS gets overridden for both SONIC_MAKE_DEBS and SONIC_DPKG_DEBS, so this setting might end up not doing anything to add hardening build options.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants