From: Khem Raj Date: Tue, 4 Jul 2017 01:33:10 +0000 (-0700) Subject: security_flags.inc: Do not build gcc for powerpc with PIE defaults X-Git-Tag: uninative-1.7~243 X-Git-Url: https://code.ossystems.io/gitweb?a=commitdiff_plain;h=4f3a9ccdb1d45804f4c094589e69e0bc87dc9c62;p=openembedded-core.git security_flags.inc: Do not build gcc for powerpc with PIE defaults Since we have disabled FPIE from SECURITY_CFLAGS already, we have to ensure the same with gcc, otherwise gcc (on-device) will be built defaulting to PIE, and such binaries will fail to execute Signed-off-by: Khem Raj --- diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc index dd713b9818..ab2062b78f 100644 --- a/meta/conf/distro/include/security_flags.inc +++ b/meta/conf/distro/include/security_flags.inc @@ -29,6 +29,7 @@ SECURITY_X_LDFLAGS ?= "-fstack-protector-strong -Wl,-z,relro" # powerpc does not get on with pie for reasons not looked into as yet SECURITY_CFLAGS_powerpc = "-fstack-protector-strong ${lcl_maybe_fortify} ${SECURITY_NOPIE_CFLAGS}" SECURITY_CFLAGS_pn-libgcc_powerpc = "" +GCCPIE_powerpc = "" # arm specific security flag issues SECURITY_CFLAGS_pn-glibc = ""