diff options
| author | Hongxu Jia <hongxu.jia@windriver.com> | 2018-08-29 22:01:40 +0800 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2018-08-30 16:16:06 +0100 |
| commit | 0ed4a6233bdcb25cbdce698504611541420d92d0 (patch) | |
| tree | 732ec6f9ffab546ccf6ca3275bab662e1d4ba44c /scripts/lib/devtool/import.py | |
| parent | 38c410bb7d1688cd952da9f19269c2a65a92ab45 (diff) | |
| download | openembedded-core-0ed4a6233bdcb25cbdce698504611541420d92d0.tar.gz openembedded-core-0ed4a6233bdcb25cbdce698504611541420d92d0.tar.bz2 openembedded-core-0ed4a6233bdcb25cbdce698504611541420d92d0.zip | |
security_flags.inc: add var-SECURITY_STACK_PROTECTOR to improve variable OVERRIDES
There are var-SECURITY_PIE_CFLAGS, var-lcl_maybe_fortify and
var-SECURITY_STRINGFORMAT which are helpful for OVERRIDES.
Also add var-SECURITY_STACK_PROTECTOR, and drop hardcoded `_remove'
overrides. Such as `4ca946c security_flags: use -fstack-protector-strong',
it s/-fstack-protector-all/-fstack-protector-strong/, only tweak
var-SECURITY_STACK_PROTECTOR is sufficient.
The fix does not have any side affect on SECURITY_CFLAGS of glibc/
glibc-initial/gcc-runtime, these three directly assigned with "".
...
SECURITY_CFLAGS_pn-glibc = ""
SECURITY_CFLAGS_pn-glibc-initial = ""
SECURITY_CFLAGS_pn-gcc-runtime = ""
...
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'scripts/lib/devtool/import.py')
0 files changed, 0 insertions, 0 deletions