diff options
Diffstat (limited to 'meta/conf/distro')
| -rw-r--r-- | meta/conf/distro/include/security_flags.inc | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc index 0ee38140ef..9608c7f069 100644 --- a/meta/conf/distro/include/security_flags.inc +++ b/meta/conf/distro/include/security_flags.inc | |||
| @@ -1,3 +1,10 @@ | |||
| 1 | # Setup extra CFLAGS and LDFLAGS which have 'security' benefits. These | ||
| 2 | # don't work universally, there are recipes which can't use one, the other | ||
| 3 | # or both so a blacklist is maintained here. The idea would be over | ||
| 4 | # time to reduce this list to nothing. | ||
| 5 | # From a Yocto Project perspective, this file is included and tested | ||
| 6 | # in the DISTRO="poky-lsb" configuration. | ||
| 7 | |||
| 1 | SECURITY_CFLAGS ?= "-fstack-protector-all -pie -fpie -D_FORTIFY_SOURCE=2" | 8 | SECURITY_CFLAGS ?= "-fstack-protector-all -pie -fpie -D_FORTIFY_SOURCE=2" |
| 2 | SECURITY_NO_PIE_CFLAGS ?= "-fstack-protector-all -D_FORTIFY_SOURCE=2" | 9 | SECURITY_NO_PIE_CFLAGS ?= "-fstack-protector-all -D_FORTIFY_SOURCE=2" |
| 3 | SECURITY_LDFLAGS ?= "-Wl,-z,relro,-z,now" | 10 | SECURITY_LDFLAGS ?= "-Wl,-z,relro,-z,now" |