From patchwork Thu Jul 6 14:33:10 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 107154 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp2246859obb; Thu, 6 Jul 2017 07:34:56 -0700 (PDT) X-Received: by 10.99.50.4 with SMTP id y4mr21330693pgy.238.1499351696662; Thu, 06 Jul 2017 07:34:56 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1499351696; cv=none; d=google.com; s=arc-20160816; b=hZReMDEu0Cekq35k+hinjEFk1u9YMZbZdNgStH8Xy3PentOk/yk/f/VTHOsC7z1J67 cCcEG6YNaalSRLPsY3j9+5tYq0DqnaSsoHl1R+DS5YHAAvkj6308hu6aNND+/eUbxorb LurjAc62NhcyDaOrSHt8kr0/c4SYz2+4uSyavpFui7nJMfX20b7zri7hmqx7zpA2Rkjr ij3e1+aL9YEqAbi5Y7jzDNZbNuQ5nBICcFirCYOareglka1ntCPMweLX7giH/3/uCqY4 CKhZOg6YqLpsyRcDlWcA9p+JfXQ/I4/KlEipu5GGiQekYzQgdO12JFrr0fdnwEXJNZTP +WZw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=bCIYV+03mZh8fSIlcXlPlPJeVDgfLgGyUHLIPTbNpZQ=; b=MWmWQU941DtaRZYdIp8yaB8p2AkEXA17D7ash72V8BQ5BhgEIKnVc7qZieRP8IFBm+ MPL60dx905rYJMuasA4V2Zq6wsz71jPqattwnG1cpgPjuUKphS8b5kzuKQh6LUvBWAxS TF9pB7fA/6j1fkoP1XDncHcrbVNXwUgRe0/aDLrMt4mw54wNbmznDbk2Xl1eefejDWpT prtofxxrm0y+8G82Fih+ODjyynaV4nouDBAnJEx4VpFNruOGcwoiV16Brzok5bU0+gHU MTQuHvv9bAg/OqvTN8C3oOAjojToxNPQUiDZXwT3Imcb4rJiQOxMCwlsN89T3ZVEQXmP HNmw== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=k++8TzYj; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id 63si210421pgd.201.2017.07.06.07.34.56; Thu, 06 Jul 2017 07:34:56 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=k++8TzYj; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 314D177D1A; Thu, 6 Jul 2017 14:34:18 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pg0-f68.google.com (mail-pg0-f68.google.com [74.125.83.68]) by mail.openembedded.org (Postfix) with ESMTP id 9DB24776D1 for ; Thu, 6 Jul 2017 14:33:46 +0000 (UTC) Received: by mail-pg0-f68.google.com with SMTP id j186so474524pge.1 for ; Thu, 06 Jul 2017 07:33:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=ZKfzVds5iSQOoYAVBcWFX0w3X6CqxkgFpniCD/a5kJA=; b=k++8TzYjVFsuNcHSiZm4jX0MANvJ2u0ng2jUHS1f2BLzA07w+U4oGnQhh44ZkV3CuC wlG6GgU05F2tLvF7KvE3q6SONF4cSYy0GwlRojZ0SMaLv55ZbCwqOENtvug9t3+DLWUP D4JR6MNpyZ+1tnFueLbX9eZcCX7W2MEkZlrgxjJLzluSO/7iMw8OLNq3aTvl+pnCYP/7 kUTWnknfjSz2VWgHSrXT18CM4ieNwJ0PH7Sqk8P/GhumB2ofdGf9ZQf8PTcZzBjDMWDo 5aQlOfE2+Y6Q4tdfM5uPIcJcSkM+b42TpH6+SPdSFSpz3IKsdAfzQkhcvLNWwgcivs9e CAuQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=ZKfzVds5iSQOoYAVBcWFX0w3X6CqxkgFpniCD/a5kJA=; b=P+NvURTDo+3+4gvblCoexafhh/ANsMRSIghKG8nsMzav8cR8ThHjl0PHq0kuPUy+P1 zzbX9hMZJHdD4mZI7pqOHauRpMVccKoMdH4KRREL+u3WcgE8vq+22NN3BreZZ3fWJ1gG rFgI46QxHk3f99JsxHzvlofDT8ftW9n4QcppdZJsnN/wobuNj5oUzd4awJpJdaTvqjEu 7xweTSRla+/07UGYJNXgNJ2CMC5v93LfHJ96Zpq+FVkbBF8fYaJtCMEko9WRydSzbdCp iwbACDdb7ZATn4sAE1JLhle0tFCEQ/3dBKxsNI5FPFxS9YlZv71AYypBf7nbblKnS7WG LmPw== X-Gm-Message-State: AIVw112bvQH3+JSkgVMB9ivmVjejXvhLhjUFjO/25kZBwcwGcdNDgWRE fjMBCCdcuq1UdMH/ X-Received: by 10.84.233.131 with SMTP id l3mr29093796plk.298.1499351628019; Thu, 06 Jul 2017 07:33:48 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id w66sm1132739pfi.63.2017.07.06.07.33.46 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 06 Jul 2017 07:33:47 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Thu, 6 Jul 2017 07:33:10 -0700 Message-Id: X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 09/22] security_flags.inc: Do not build gcc for powerpc with PIE defaults X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org Since we have disabled FPIE from SECURITY_CFLAGS already, we have to ensure the same with gcc, otherwise gcc (on-device) will be built defaulting to PIE, and such binaries will fail to execute Signed-off-by: Khem Raj --- meta/conf/distro/include/security_flags.inc | 1 + 1 file changed, 1 insertion(+) -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc index dd713b9818..ab2062b78f 100644 --- a/meta/conf/distro/include/security_flags.inc +++ b/meta/conf/distro/include/security_flags.inc @@ -29,6 +29,7 @@ SECURITY_X_LDFLAGS ?= "-fstack-protector-strong -Wl,-z,relro" # powerpc does not get on with pie for reasons not looked into as yet SECURITY_CFLAGS_powerpc = "-fstack-protector-strong ${lcl_maybe_fortify} ${SECURITY_NOPIE_CFLAGS}" SECURITY_CFLAGS_pn-libgcc_powerpc = "" +GCCPIE_powerpc = "" # arm specific security flag issues SECURITY_CFLAGS_pn-glibc = ""