Hi! Thinking about how we could improve automated QA, I was wondering if we could have buildbot also run builds with hardening features enabled?
For the beginning, it'd be enough if every 10th build would have SSP, seccomp/jails, RELRO, ... as well as LXC-related features enabled. Then we could have broken_packages_hardened/* and package maintainers could get aware that stuff breaks if hardening is enabled. In a way, the same could be applied for debugging (CONFIG_DEBUG) as well as localization (BUILD_NLS), but I reckon it makes sense to start-off with all sorts of hardening features enabled. What do you think? Could tasks to build hardened snapshots for all targets be dispatched by buildbot.openwrt.org? Who'd want to donate a buildslave for that? Cheers Daniel _______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel