]> code.ossystems Code Review - openembedded-core.git/commitdiff
openssl: build always with -Wa,--noexecstack
authorEnrico Scholz <enrico.scholz@sigma-chemnitz.de>
Thu, 12 Jan 2012 16:30:21 +0000 (17:30 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 18 Mar 2013 13:10:06 +0000 (13:10 +0000)
There is no reason to disable exec-stack only for -native builds;
binaries on the target will suffer from the same SELinux ACLs.

OpenSSL does not use executable stack so this option can be disabled
unconditionally.

Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-connectivity/openssl/openssl.inc

index af1922e1f6d54f2ec838c9c48ce5f007390a4f5c..f5b24324ba59ed9c1c15a3893a749fa96adff13f 100644 (file)
@@ -18,12 +18,10 @@ SRC_URI = "http://www.openssl.org/source/openssl-${PV}.tar.gz \
 S = "${WORKDIR}/openssl-${PV}"
 
 AR_append = " r"
+# Avoid binaries being marked as requiring an executable stack since it 
+# doesn't(which causes and this causes issues with SELinux
 CFLAG = "${@base_conditional('SITEINFO_ENDIANNESS', 'le', '-DL_ENDIAN', '-DB_ENDIAN', d)} \
-       -DTERMIO ${CFLAGS} -Wall"
-
-# Avoid binaries being marked as requiring an executable stack (which causes 
-# issues with SELinux on the host)
-CFLAG_append_class-native = " -Wa,--noexecstack"
+       -DTERMIO ${CFLAGS} -Wall -Wa,--noexecstack"
 
 # -02 does not work on mipsel: ssh hangs when it tries to read /dev/urandom
 CFLAG_mtx-1 := "${@'${CFLAG}'.replace('-O2', '')}"