diff options
-rw-r--r-- | meta/conf/distro/include/security_flags.inc | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc index a871a3fe0f..fa604fd5a4 100644 --- a/meta/conf/distro/include/security_flags.inc +++ b/meta/conf/distro/include/security_flags.inc | |||
@@ -1,6 +1,7 @@ | |||
1 | SECURITY_CFLAGS ?= "-fstack-protector-all -pie -fpie -D_FORTIFY_SOURCE=2" | 1 | SECURITY_CFLAGS ?= "-fstack-protector-all -pie -fpie -D_FORTIFY_SOURCE=2" |
2 | SECURITY_NO_PIE_CFLAGS ?= "-fstack-protector-all -D_FORTIFY_SOURCE=2" | 2 | SECURITY_NO_PIE_CFLAGS ?= "-fstack-protector-all -D_FORTIFY_SOURCE=2" |
3 | SECURITY_LDFLAGS ?= "-Wl,-z,relro,-z,now" | 3 | SECURITY_LDFLAGS ?= "-Wl,-z,relro,-z,now" |
4 | SECURITY_X_LDFLAGS ?= "-Wl,-z,relro" | ||
4 | 5 | ||
5 | # powerpc does not get on with pie for reasons not looked into as yet | 6 | # powerpc does not get on with pie for reasons not looked into as yet |
6 | SECURITY_CFLAGS_powerpc = "-fstack-protector-all -D_FORTIFY_SOURCE=2" | 7 | SECURITY_CFLAGS_powerpc = "-fstack-protector-all -D_FORTIFY_SOURCE=2" |
@@ -72,3 +73,11 @@ SECURITY_CFLAGS_pn-pulseaudio = "${SECURITY_NO_PIE_CFLAGS}" | |||
72 | 73 | ||
73 | TARGET_CFLAGS_append = " ${SECURITY_CFLAGS}" | 74 | TARGET_CFLAGS_append = " ${SECURITY_CFLAGS}" |
74 | TARGET_LDFLAGS_append = " ${SECURITY_LDFLAGS}" | 75 | TARGET_LDFLAGS_append = " ${SECURITY_LDFLAGS}" |
76 | |||
77 | SECURITY_LDFLAGS_pn-xf86-video-fbdev = "${SECURITY_X_LDFLAGS}" | ||
78 | SECURITY_LDFLAGS_pn-xf86-video-intel = "${SECURITY_X_LDFLAGS}" | ||
79 | SECURITY_LDFLAGS_pn-xf86-video-omapfb = "${SECURITY_X_LDFLAGS}" | ||
80 | SECURITY_LDFLAGS_pn-xf86-video-omap = "${SECURITY_X_LDFLAGS}" | ||
81 | SECURITY_LDFLAGS_pn-xf86-video-vesa = "${SECURITY_X_LDFLAGS}" | ||
82 | SECURITY_LDFLAGS_pn-xf86-video-vmware = "${SECURITY_X_LDFLAGS}" | ||
83 | SECURITY_LDFLAGS_pn-xserver-xorg = "${SECURITY_X_LDFLAGS}" | ||