From patchwork Tue Jul 4 15:50:55 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106995 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp1195452obb; Tue, 4 Jul 2017 08:51:27 -0700 (PDT) X-Received: by 10.98.49.2 with SMTP id x2mr15691558pfx.48.1499183486922; Tue, 04 Jul 2017 08:51:26 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1499183486; cv=none; d=google.com; s=arc-20160816; b=M2Q2beJW87Frh8nloH1H9HQwgD3FR4ZDyKccxXT8oOdUX3OEQ6EW+RvrZRYQ0zoqrb oBh1DAKV+jWLiISS4LqLexrdKN+RGxd2N6vAiXPcctazyqRnM5lUJXk0u4cXBhRv65G1 2QrtM82xT2ATuiZ6EceP6LXy4tbOH7YNYI8k/tOIYMrCErr+GYoetfwVChgmel8mCqeF XXFzq8L/jBQUSYWq+IaM25tCEpon6D5iZjGtrEGvqDXNjGwyvAdKS4VMyh0i+DoqxhHj UkztMM2J2lUK/BtJCKO42cdGFqoFSomuELzKBuwdbvDZe7WXm3S5nvyitkl3CGmPnOeX r57g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=bCIYV+03mZh8fSIlcXlPlPJeVDgfLgGyUHLIPTbNpZQ=; b=nx/3cXWMswbSpIeS9sc+xHN9Y7bYPzjnEBJWu7tE2M1+xd4TCB3um6wSzOqluF2jEQ I1lAx8cJdJ1/D9lenSd6NFEAcggYCEYtQClrFK5uPjE2je60XQ9I7aOnKU65ZCfAfWNA M/7F2HenbSwW6nMfNNGU7JWdHLf1Jgc+Fh/cFevQtZ9q2HRXzsaKOp8aIenudUWckw/O nsyhXZOCuDiZneuk22sRX9l1ip0Zsve/0iqBcdbiCTZjC/7Hi0Nsq0qmJvCH+QFkROzp d2mMMIdJrXSFQofb8nRZD31y5cPuxWy8i2bs8kKbFNDT/ZramFAyk8OicisIcPQKyeZH EFTw== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=cLDP4rJm; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id n3si16277026plb.621.2017.07.04.08.51.26; Tue, 04 Jul 2017 08:51:26 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=cLDP4rJm; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 38D0F77CEC; Tue, 4 Jul 2017 15:51:24 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pg0-f65.google.com (mail-pg0-f65.google.com [74.125.83.65]) by mail.openembedded.org (Postfix) with ESMTP id 36FB477BDE for ; Tue, 4 Jul 2017 15:51:11 +0000 (UTC) Received: by mail-pg0-f65.google.com with SMTP id d193so9442551pgc.2 for ; Tue, 04 Jul 2017 08:51:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=ZKfzVds5iSQOoYAVBcWFX0w3X6CqxkgFpniCD/a5kJA=; b=cLDP4rJmN3B8tzxufTGU7m0ja5xpDENf8x5A4ijMUXf9sFXXndP7pNeM/90X/6SNSl TE0stWzEPzhisjx274VzRSmcLX/OhnThn0TEnK/YtzC+VDZWbGttlgPMizBLyZpL0v8O 6V3wc6RSu9eyVKsZYLORFwORHan61cVs2IiM1/30M/idgfb0Tx1IqgXyZy97ll9Io/B9 6RUBvAiD6qg/u9C9yFQMliPdJ/SFL5ooQ3HNPCXMFvvli6P44uYzIHbHjpO7wB/0QgPC xj2vSNuJiJX6NpklssfdMqOBlD4udWFICjOEJdWNIVUdtOFMuis9Czdq02s4d968Y9vq 6wyw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=ZKfzVds5iSQOoYAVBcWFX0w3X6CqxkgFpniCD/a5kJA=; b=lVJ3QiwFpt55Kp58N+FxKeNLli/8Qnd7mdLqLH0MknEIWdr7NrPbA8Mkr2dKsM47uO A9+v3ImCP+ar0eKuoLLrViMlLWwXCldu50+x83ehwEdXDYlbKhwQNEr0Iwo3tNce/tdl 3eDnc/kHx81l7FpFCTb/8nnXqij0ZuB+YsD8tUQf+a6Ww8YFmQkoFvjiObaHaGC9JZiu C/MTAIwpEDcJiL35jp3shkJZrLA4T6F9t+77NyPSebIgOCJYQWkb0QBzxt/mSoY311Re AS+q70Klz2aGeqEeNZ09yguvetFvhuJqrLZO4SfgSx7RUuvVYsJ2WkdNFrViyG47HcPN XJJQ== X-Gm-Message-State: AIVw112l4K3HPiELz2RF9/2kJ/iexuxhhYvwfJpghNZ2aGQe8vmNv7Lp +lNRokE+gS4TJ33W X-Received: by 10.84.140.107 with SMTP id 98mr17304762pls.97.1499183473129; Tue, 04 Jul 2017 08:51:13 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id r63sm36545914pgr.65.2017.07.04.08.51.11 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 04 Jul 2017 08:51:12 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Tue, 4 Jul 2017 08:50:55 -0700 Message-Id: <20170704155056.12467-2-raj.khem@gmail.com> X-Mailer: git-send-email 2.13.2 In-Reply-To: <20170704155056.12467-1-raj.khem@gmail.com> References: <20170704155056.12467-1-raj.khem@gmail.com> Subject: [OE-core] [PATCH 2/3] security_flags.inc: Do not build gcc for powerpc with PIE defaults X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org Since we have disabled FPIE from SECURITY_CFLAGS already, we have to ensure the same with gcc, otherwise gcc (on-device) will be built defaulting to PIE, and such binaries will fail to execute Signed-off-by: Khem Raj --- meta/conf/distro/include/security_flags.inc | 1 + 1 file changed, 1 insertion(+) -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc index dd713b9818..ab2062b78f 100644 --- a/meta/conf/distro/include/security_flags.inc +++ b/meta/conf/distro/include/security_flags.inc @@ -29,6 +29,7 @@ SECURITY_X_LDFLAGS ?= "-fstack-protector-strong -Wl,-z,relro" # powerpc does not get on with pie for reasons not looked into as yet SECURITY_CFLAGS_powerpc = "-fstack-protector-strong ${lcl_maybe_fortify} ${SECURITY_NOPIE_CFLAGS}" SECURITY_CFLAGS_pn-libgcc_powerpc = "" +GCCPIE_powerpc = "" # arm specific security flag issues SECURITY_CFLAGS_pn-glibc = ""