diff options
| author | Khem Raj <raj.khem@gmail.com> | 2018-08-19 10:23:34 -0700 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2018-08-20 10:43:59 +0100 |
| commit | 1520f5a345fd03d46f33f0efaf76191e96344bec (patch) | |
| tree | 79aba414bf2dc1901d51d904fe07441df9ddcf57 | |
| parent | 007ef1f468110b2698a27ea9a6d43fed5a0a9fc2 (diff) | |
| download | openembedded-core-1520f5a345fd03d46f33f0efaf76191e96344bec.tar.gz openembedded-core-1520f5a345fd03d46f33f0efaf76191e96344bec.tar.bz2 openembedded-core-1520f5a345fd03d46f33f0efaf76191e96344bec.zip | |
powerpc: Remove pie flags from compiler cmdline
Original approach to add -no-<pie> flags cause link time behavior changes
where packages start to lose the -fPIC -DPIC in compiler cmdline and this
list keeps growing as we build more and more packages,
Instead lets just remove the options we dont need from SECURITY_CFLAGS
this makes it more robust and less intrusive
This also means we do not need to re-add pic options as we started to do
for affected packages
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/conf/distro/include/security_flags.inc | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc index 52e1e4ebc5..4e20a4d0f8 100644 --- a/meta/conf/distro/include/security_flags.inc +++ b/meta/conf/distro/include/security_flags.inc @@ -28,13 +28,10 @@ SECURITY_LDFLAGS ?= "-fstack-protector-strong -Wl,-z,relro,-z,now" SECURITY_X_LDFLAGS ?= "-fstack-protector-strong -Wl,-z,relro" # powerpc does not get on with pie for reasons not looked into as yet -SECURITY_CFLAGS_powerpc = "-fstack-protector-strong ${lcl_maybe_fortify} ${SECURITY_NOPIE_CFLAGS}" -SECURITY_CFLAGS_pn-libgcc_powerpc = "" -SECURITY_CFLAGS_append_powerpc_pn-libdrm = " -fPIC -DPIC" -SECURITY_CFLAGS_append_powerpc_pn-libinput = " -fPIC -DPIC" -SECURITY_CFLAGS_append_powerpc_pn-at-spi2-core = " -fPIC -DPIC" GCCPIE_powerpc = "" GLIBCPIE_powerpc = "" +SECURITY_CFLAGS_remove_powerpc = "${SECURITY_PIE_CFLAGS}" +SECURITY_CFLAGS_pn-libgcc_powerpc = "" SECURITY_CFLAGS_pn-glibc = "" SECURITY_CFLAGS_pn-glibc-initial = "" |