From b205abd2aee89910cc676e25825182822b02a091 Mon Sep 17 00:00:00 2001 From: Alexander Kanavin Date: Sat, 31 Jul 2021 16:01:53 +0200 Subject: local.conf.sample: disable prelink Recent tests have shown that prelinking works only when PIE is not enabled [0], and as PIE is both a desirable security feature, and the only configuration provided and tested by Yocto, there is simply no sense in continuing to enable prelink. There's also a concern that no one is maintaining the code, and there are open bugs (including serious ones such as [1]). Given that prelink does intricate address arithmetic and rewriting of binaries the best option is to disable the feature. [0] https://rlbl.me/prelink-1 https://rlbl.me/prelink-2 [1] https://bugzilla.yoctoproject.org/show_bug.cgi?id=14429 (From meta-yocto rev: f712b495ce6362d50db3c5c565245535429d6419) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie --- meta-poky/conf/local.conf.sample | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'meta-poky') diff --git a/meta-poky/conf/local.conf.sample b/meta-poky/conf/local.conf.sample index 3ef25a2a89..f1f6d690fb 100644 --- a/meta-poky/conf/local.conf.sample +++ b/meta-poky/conf/local.conf.sample @@ -148,8 +148,7 @@ EXTRA_IMAGE_FEATURES ?= "debug-tweaks" # enable extra features. Some available options which can be included in this variable # are: # - 'buildstats' collect build statistics -# - 'image-prelink' in order to prelink the filesystem image -USER_CLASSES ?= "buildstats image-prelink" +USER_CLASSES ?= "buildstats" # # Runtime testing of images -- cgit v1.2.3-54-g00ecf