summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRichard Purdie <richard.purdie@linuxfoundation.org>2015-07-27 12:26:30 +0100
committerRichard Purdie <richard.purdie@linuxfoundation.org>2015-07-27 23:29:15 +0100
commit997893e92862774424b65c53691cb2ecc2010035 (patch)
treee3a80119ecec555a44e49a7de8c6c58395fc9c17
parentf4f72b15ad915fb1354dcc79fe1f03d06757f5aa (diff)
downloadpoky-997893e92862774424b65c53691cb2ecc2010035.tar.gz
security-flags: Disable PIE for coreutils, elfutils, gcc, iptables
With gcc 5, we need to disable the PIE flags for more recipes in order to have successful builds. (From OE-Core rev: ec2f1b5af102ab6a8fcc23bf115c8f0451ab7eb8) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r--meta/conf/distro/include/security_flags.inc6
1 files changed, 4 insertions, 2 deletions
diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc
index 85a3bfe589..372497290d 100644
--- a/meta/conf/distro/include/security_flags.inc
+++ b/meta/conf/distro/include/security_flags.inc
@@ -25,11 +25,10 @@ SECURITY_CFLAGS_pn-webkit-gtk_powerpc = ""
25 25
26# arm specific security flag issues 26# arm specific security flag issues
27SECURITY_CFLAGS_pn-lttng-tools_arm = "${SECURITY_NO_PIE_CFLAGS}" 27SECURITY_CFLAGS_pn-lttng-tools_arm = "${SECURITY_NO_PIE_CFLAGS}"
28SECURITY_CFLAGS_pn-elfutils_arm = "${SECURITY_NO_PIE_CFLAGS}"
29
30SECURITY_CFLAGS_pn-aspell = "${SECURITY_NO_PIE_CFLAGS}" 28SECURITY_CFLAGS_pn-aspell = "${SECURITY_NO_PIE_CFLAGS}"
31SECURITY_CFLAGS_pn-beecrypt = "${SECURITY_NO_PIE_CFLAGS}" 29SECURITY_CFLAGS_pn-beecrypt = "${SECURITY_NO_PIE_CFLAGS}"
32SECURITY_CFLAGS_pn-blktrace = "${SECURITY_NO_PIE_CFLAGS}" 30SECURITY_CFLAGS_pn-blktrace = "${SECURITY_NO_PIE_CFLAGS}"
31SECURITY_CFLAGS_pn-coreutils = "${SECURITY_NO_PIE_CFLAGS}"
33# Curl seems to check for FORTIFY_SOURCE in CFLAGS, but even assigned 32# Curl seems to check for FORTIFY_SOURCE in CFLAGS, but even assigned
34# to CPPFLAGS it gets picked into CFLAGS in bitbake. 33# to CPPFLAGS it gets picked into CFLAGS in bitbake.
35#TARGET_CPPFLAGS_pn-curl += "-D_FORTIFY_SOURCE=2" 34#TARGET_CPPFLAGS_pn-curl += "-D_FORTIFY_SOURCE=2"
@@ -39,10 +38,12 @@ SECURITY_CFLAGS_pn-db = "${SECURITY_NO_PIE_CFLAGS}"
39SECURITY_CFLAGS_pn-directfb = "${SECURITY_NO_PIE_CFLAGS}" 38SECURITY_CFLAGS_pn-directfb = "${SECURITY_NO_PIE_CFLAGS}"
40SECURITY_CFLAGS_pn-glibc = "" 39SECURITY_CFLAGS_pn-glibc = ""
41SECURITY_CFLAGS_pn-glibc-initial = "" 40SECURITY_CFLAGS_pn-glibc-initial = ""
41SECURITY_CFLAGS_pn-elfutils = "${SECURITY_NO_PIE_CFLAGS}"
42SECURITY_CFLAGS_pn-enchant = "${SECURITY_NO_PIE_CFLAGS}" 42SECURITY_CFLAGS_pn-enchant = "${SECURITY_NO_PIE_CFLAGS}"
43SECURITY_CFLAGS_pn-expect = "${SECURITY_NO_PIE_CFLAGS}" 43SECURITY_CFLAGS_pn-expect = "${SECURITY_NO_PIE_CFLAGS}"
44SECURITY_CFLAGS_pn-flac = "${SECURITY_NO_PIE_CFLAGS}" 44SECURITY_CFLAGS_pn-flac = "${SECURITY_NO_PIE_CFLAGS}"
45SECURITY_CFLAGS_pn-flex = "${SECURITY_NO_PIE_CFLAGS}" 45SECURITY_CFLAGS_pn-flex = "${SECURITY_NO_PIE_CFLAGS}"
46SECURITY_CFLAGS_pn-gcc = "${SECURITY_NO_PIE_CFLAGS}"
46SECURITY_CFLAGS_pn-gcc-runtime = "${SECURITY_NO_PIE_CFLAGS}" 47SECURITY_CFLAGS_pn-gcc-runtime = "${SECURITY_NO_PIE_CFLAGS}"
47SECURITY_CFLAGS_pn-gcc-sanitizers = "${SECURITY_NO_PIE_CFLAGS}" 48SECURITY_CFLAGS_pn-gcc-sanitizers = "${SECURITY_NO_PIE_CFLAGS}"
48SECURITY_CFLAGS_pn-gdb = "${SECURITY_NO_PIE_CFLAGS}" 49SECURITY_CFLAGS_pn-gdb = "${SECURITY_NO_PIE_CFLAGS}"
@@ -60,6 +61,7 @@ SECURITY_CFLAGS_pn-gstreamer1.0-plugins-bad = "${SECURITY_NO_PIE_CFLAGS}"
60SECURITY_CFLAGS_pn-gstreamer1.0-plugins-good = "${SECURITY_NO_PIE_CFLAGS}" 61SECURITY_CFLAGS_pn-gstreamer1.0-plugins-good = "${SECURITY_NO_PIE_CFLAGS}"
61SECURITY_CFLAGS_pn-harfbuzz = "${SECURITY_NO_PIE_CFLAGS}" 62SECURITY_CFLAGS_pn-harfbuzz = "${SECURITY_NO_PIE_CFLAGS}"
62SECURITY_CFLAGS_pn-kexec-tools = "${SECURITY_NO_PIE_CFLAGS}" 63SECURITY_CFLAGS_pn-kexec-tools = "${SECURITY_NO_PIE_CFLAGS}"
64SECURITY_CFLAGS_pn-iptables = "${SECURITY_NO_PIE_CFLAGS}"
63SECURITY_CFLAGS_pn-libaio = "${SECURITY_NO_PIE_CFLAGS}" 65SECURITY_CFLAGS_pn-libaio = "${SECURITY_NO_PIE_CFLAGS}"
64SECURITY_CFLAGS_pn-libcap = "${SECURITY_NO_PIE_CFLAGS}" 66SECURITY_CFLAGS_pn-libcap = "${SECURITY_NO_PIE_CFLAGS}"
65SECURITY_CFLAGS_pn-libgcc = "${SECURITY_NO_PIE_CFLAGS}" 67SECURITY_CFLAGS_pn-libgcc = "${SECURITY_NO_PIE_CFLAGS}"