diff options
| author | Ross Burton <ross.burton@intel.com> | 2018-05-14 13:02:11 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2018-05-15 10:56:48 +0100 |
| commit | 472c86127ab57759588e5ec53c75ebb52667f094 (patch) | |
| tree | 93cb5f299241ed09f145fc5953982224ba45bf2a | |
| parent | cb68e9a2feade1ee05f8c27438b41bdeac55ae3d (diff) | |
| download | poky-472c86127ab57759588e5ec53c75ebb52667f094.tar.gz | |
security_flags: disable static PIE in glibc
Static PIE doesn't work entirely right in GCC 7, for example ldconfig on ARM
with the flags enabled will something segfault during initialisation.
To mitigate this until we have GCC 8 integrated, don't enable static PIE.
(From OE-Core rev: 5f64946b8740a5d944f48ec430470265703bfe5e)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/conf/distro/include/security_flags.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc index d66dd57649..aaeca6991b 100644 --- a/meta/conf/distro/include/security_flags.inc +++ b/meta/conf/distro/include/security_flags.inc | |||
| @@ -6,7 +6,7 @@ | |||
| 6 | # in the DISTRO="poky-lsb" configuration. | 6 | # in the DISTRO="poky-lsb" configuration. |
| 7 | 7 | ||
| 8 | GCCPIE ?= "--enable-default-pie" | 8 | GCCPIE ?= "--enable-default-pie" |
| 9 | GLIBCPIE ?= "--enable-static-pie" | 9 | # If static PIE is known to work well, GLIBCPIE="--enable-static-pie" can be set |
| 10 | 10 | ||
| 11 | # _FORTIFY_SOURCE requires -O1 or higher, so disable in debug builds as they use | 11 | # _FORTIFY_SOURCE requires -O1 or higher, so disable in debug builds as they use |
| 12 | # -O0 which then results in a compiler warning. | 12 | # -O0 which then results in a compiler warning. |