From f9719cc1c3fe9d380336e7af418daf27473b2e8b Mon Sep 17 00:00:00 2001 From: Alexander Kanavin Date: Sat, 31 Jul 2021 16:01:53 +0200 Subject: [PATCH] local.conf.sample: disable prelink Recent tests have shown that prelinking works only when PIE is not enabled [0], and as PIE is both a desirable security feature, and the only configuration provided and tested by Yocto, there is simply no sense in continuing to enable prelink. There's also a concern that no one is maintaining the code, and there are open bugs (including serious ones such as [1]). Given that prelink does intricate address arithmetic and rewriting of binaries the best option is to disable the feature. [0] https://rlbl.me/prelink-1 https://rlbl.me/prelink-2 [1] https://bugzilla.yoctoproject.org/show_bug.cgi?id=14429 Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie --- meta/conf/local.conf.sample | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/meta/conf/local.conf.sample b/meta/conf/local.conf.sample index 481a04c34f..1bb9145aae 100644 --- a/meta/conf/local.conf.sample +++ b/meta/conf/local.conf.sample @@ -126,8 +126,7 @@ EXTRA_IMAGE_FEATURES ?= "debug-tweaks" # enable extra features. Some available options which can be included in this variable # are: # - 'buildstats' collect build statistics -# - 'image-prelink' in order to prelink the filesystem image -USER_CLASSES ?= "buildstats image-prelink" +USER_CLASSES ?= "buildstats" # -- 2.40.1