x86: if stackprotector is enabled, thn use stack-protector-all by default

also enable the rodata and nx tests.

Signed-off-by: Ingo Molnar <mingo@elte.hu>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>

1 files changed, 2 insertions, 1 deletions

diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig
index dcbec34154cf..83d8392c1334 100644
--- a/arch/x86/Kconfig
+++ b/arch/x86/Kconfig
@@ -1142,7 +1142,7 @@ config SECCOMP
 
 config CC_STACKPROTECTOR
         bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)"
-        depends on X86_64 && EXPERIMENTAL && BROKEN
+        depends on X86_64
         help
          This option turns on the -fstack-protector GCC feature. This
           feature puts, at the beginning of critical functions, a canary
@@ -1159,6 +1159,7 @@ config CC_STACKPROTECTOR
 config CC_STACKPROTECTOR_ALL
         bool "Use stack-protector for all functions"
         depends on CC_STACKPROTECTOR
+        default y
         help
           Normally, GCC only inserts the canary value protection for
           functions that use large-ish on-stack buffers. By enabling