<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-oe/conf/distro/include, branch pyro</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=pyro</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=pyro'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2017-05-04T07:18:58+00:00</updated>
<entry>
<title>meta_oe_security_flags.inc: Disable PIE for libdevmapper</title>
<updated>2017-05-04T07:18:58+00:00</updated>
<author>
<name>Peter Kjellerstedt</name>
<email>peter.kjellerstedt@axis.com</email>
</author>
<published>2017-04-28T14:23:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=3af551405e044ec77b85f50a6a33a8ed3b56f8e4'/>
<id>urn:sha1:3af551405e044ec77b85f50a6a33a8ed3b56f8e4</id>
<content type='text'>
Since libdevmapper was split out from lvm2, it now needs its own entry
to disable building with -fpie.

Signed-off-by: Peter Kjellerstedt &lt;peter.kjellerstedt@axis.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>meta_oe_security_flags.inc: Disable PIE for luajit</title>
<updated>2016-12-02T08:26:33+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2016-12-01T05:47:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=aac6bf8bf911c3f14ff9dce08f0f011838f5a426'/>
<id>urn:sha1:aac6bf8bf911c3f14ff9dce08f0f011838f5a426</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>meta_oe_security_flags: disable PIE for libdbus-c++</title>
<updated>2016-12-02T08:23:44+00:00</updated>
<author>
<name>André Draszik</name>
<email>adraszik@tycoint.com</email>
</author>
<published>2016-11-25T15:18:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=a4251575f41fa5aafe5072e562497b05c11b6702'/>
<id>urn:sha1:a4251575f41fa5aafe5072e562497b05c11b6702</id>
<content type='text'>
The short version - it ain't working.

The long version:

For shared libraries made from C++ sources, configure
runs some code to determine how to link shared libraries
(from libtool.m4) using g++. In particular, it calls
g++ ${CFLAGS} -c conftest.c
g++ ${CFLAGS} -nostdinc -shared -v conftest.o
to then parse the gcc -v output.

If CFLAGS contains -pie -fpie, g++ adds Scrt1.o to the
objects being linked together to form the final output.

Once Scrt1.o is pulled into a shared library, it becomes
impossible to link this DSO against a final binary. I
didn't investigate why, by I suspect because of
-Wl,relro -Wl,now

libtool takes note of Scrt1.o (and all other libraries
added by gcc, but those don't matter here) and adds it
everywhere a shared library is being created, see
predep_objects= and postdep_objects= in the
'LIBTOOL TAG CONFIG: CXX' section.

In other words, the the shared library created during
the build can't be linked against. This includes
some applications that are part of the libdbus-c++
source tree, but also any other external user.

While I am not sure if the root of the issue is in
- gcc (should it really add Scrt1.o despite -shared),
  or in
- libtool (should it filter out -pie -fpie during the
  configure step), or even in
- OE (should it really be adding -pie -fpie to
  everything, even shared libraries by default and
  unconditionally),
we can make things work by using SECURITY_NO_PIE_CFLAGS
instead.

Signed-off-by: André Draszik &lt;adraszik@tycoint.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>libvdpau: Disable PIE</title>
<updated>2016-11-26T00:04:53+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2016-11-03T17:26:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=bc0ea5b276629dcd1169374b8217087db2ded086'/>
<id>urn:sha1:bc0ea5b276629dcd1169374b8217087db2ded086</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>meta_oe_security_flags.inc: Add libcec, libmodplug, libcdio</title>
<updated>2016-11-23T14:24:00+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2016-11-03T08:20:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=4b3a210033cf240c8ef4326cd62e5d6d4ba62156'/>
<id>urn:sha1:4b3a210033cf240c8ef4326cd62e5d6d4ba62156</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>meta_oe_security_flags: Disable PIE for s3c64xx-gpio/s3c24xx-gpio/cpufrequtils</title>
<updated>2016-11-23T14:24:00+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2016-11-03T08:20:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=8076afca3d5f3b099be7344e6339085f3796394a'/>
<id>urn:sha1:8076afca3d5f3b099be7344e6339085f3796394a</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>meta-oe: override SECURITY_CFLAGS for llvm3.3</title>
<updated>2016-06-08T12:55:29+00:00</updated>
<author>
<name>Manuel Bachmann</name>
<email>manuel.bachmann@iot.bzh</email>
</author>
<published>2016-06-05T15:50:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=d60961764b69df2b47c5838cf8bcef8e01be90c9'/>
<id>urn:sha1:d60961764b69df2b47c5838cf8bcef8e01be90c9</id>
<content type='text'>
When compiling llvm3.3 and including meta_oe_security_flags.inc:
- on x86 (qemux86 e.g.), text relocation warnings appear ;
- on x86-64 (qemux86-64 e.g.), linking fails with the following
error message:
"relocation R_X86_64_PC32 against undefined symbol [...]
recompile with -fPIC"

Add llvm3.3 to the overrides list, so that it builds correctly.

Signed-off-by: Manuel Bachmann &lt;manuel.bachmann@iot.bzh&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>meta-oe: override SECURITY_CFLAGS for a set of recipes</title>
<updated>2015-04-24T13:11:25+00:00</updated>
<author>
<name>Dmitry Eremin-Solenikov</name>
<email>dmitry_eremin@mentor.com</email>
</author>
<published>2015-04-18T14:59:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=43ece2557f2fe620568fc194cbd4403daa8dc00e'/>
<id>urn:sha1:43ece2557f2fe620568fc194cbd4403daa8dc00e</id>
<content type='text'>
Some of recipes produce errors if the distro has enabled usage of
security_flags.inc file. Fix those errors (and QA warnings) by providing
an additional include file that is require'd from conf/layer.conf.

Signed-off-by: Dmitry Eremin-Solenikov &lt;dmitry_eremin@mentor.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
</feed>
