1 # Copyright (c) 2011 The Chromium OS Authors. All rights reserved. 2 # Use of this source code is governed by a BSD-style license that can be 3 # found in the LICENSE file. 4 5 AUTHOR = "Chrome OS Team" 6 NAME = "platform_ToolchainOptions" 7 PURPOSE = """ 8 Verify that system ELF executables were compiled with a 9 hardened toolchain. 10 """ 11 CRITERIA = """ 12 Fail if we find any ELF files compiled without the following options: 13 1. -fstack-protector-all 14 2. -D_FORTIFY_SOURCE=2 15 3. -Wl,-z,now 16 4. -Wl,-z,relro 17 5. -fPIE 18 """ 19 ATTRIBUTES = "suite:bvt-perbuild" 20 SUITE = "bvt-perbuild" 21 TEST_CLASS = "platform" 22 TEST_CATEGORY = "Functional" 23 TEST_TYPE = "client" 24 TIME="MEDIUM" 25 26 DOC = """ 27 Tests whether system ELF executables were compiled with a hardened toolchain. 28 """ 29 30 job.run_test("platform_ToolchainOptions", args=args) 31