From patchwork Mon Jul 23 19:09:28 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 142634 Delivered-To: patch@linaro.org Received: by 2002:a2e:9754:0:0:0:0:0 with SMTP id f20-v6csp6396998ljj; Mon, 23 Jul 2018 12:09:42 -0700 (PDT) X-Google-Smtp-Source: AAOMgpdjsx8ORwVqAo3JYO1mXNKAiviSBwdgArNvFA8xuR2XHjJJPkS0zA3CN39/nJoephqi3+i1 X-Received: by 2002:a17:902:b612:: with SMTP id b18-v6mr13881509pls.131.1532372982706; Mon, 23 Jul 2018 12:09:42 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1532372982; cv=none; d=google.com; s=arc-20160816; b=FspkNwppKYBgU2mBex5D84hzdkJ6bQxHejfHO4K+R9zHzGRYjIspS9KRt2kgwbuzbm jS3yb8K1nR2cPlfLUKqIGU5ruWbKzkflMF080xKoswxhMnMfNEFJ8J4VhQ/rVlLqV1L7 /dfsxjP+3YtPC91wp+ftGkMj3t888fzjsRG81HFJWF1nnNrHkP7kCPvDEnfgwk0GluKw R1vM1BTGfhtH2k65dXM//uV0anG9yba+WPZGa/cSPDkbbYAINPPYgUNB1z1C/5k+IW9U mM7Wi2T9brnhl4NC4Kqnd9yOuUX1dkvC/9kXi/AM89KT5G2zfIWEkXqwa7UiM5XGHRyB 6Frg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:message-id:date:to:from:dkim-signature :delivered-to:arc-authentication-results; bh=OuE4nbPhmS+XOxGrla6sz0g+/CVtb0gOtONVgxaD8Xw=; b=TDVVknxBZXL2F2vvPOgZerYiZ+yfH/Z4eynljpzI3+y0J7lKjvR7bMRs9Kck30EHxc w9ti7QGtmMifm8Ff3Y4fR1Gpo94E39NdBHkUtLoCP1O7lf+/iNNPlyWhSW7fY4MQCwzY 7GXu4fvh8+4XYjecDORIEsEluW4fMqXXgfrnuDhulaEUSREy/7VFIZODHWxc/e4gKZYR RRflIqbeECUZ3a/10de0sgcfkCBUhlfGUOX+gcrHudRsCK4Q+RMZyeQ7tgyq5YeXMyUw CGmy8MlxgZ1CR3EJnRhjACXvrKZjVYwqwrysRWRKFhMqAFnMliMlqyVyYxRC2v5G2F+E dgcw== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.s=20161025 header.b=IRBLGycS; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id q7-v6si1891634pll.142.2018.07.23.12.09.42; Mon, 23 Jul 2018 12:09:42 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.s=20161025 header.b=IRBLGycS; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: from layers.openembedded.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id C099774FE8; Mon, 23 Jul 2018 19:09:37 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pg1-f194.google.com (mail-pg1-f194.google.com [209.85.215.194]) by mail.openembedded.org (Postfix) with ESMTP id 5071D65C8F for ; Mon, 23 Jul 2018 19:09:36 +0000 (UTC) Received: by mail-pg1-f194.google.com with SMTP id y5-v6so1049184pgv.1 for ; Mon, 23 Jul 2018 12:09:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id; bh=qqEIzpW6bVho6E71XzYOaAM7LAFWKOmumLm18Xq0LQw=; b=IRBLGycSJMX2fvIBtJqBXJqDw1JrtMB9AInnfbKrCb2WQ19pCBu9knr0PgVfVBtuDP ADP69yFtn7oJx8lb6UZy2K9usbKprgNBPiFXMfnCf3oMzjAQGERT8GRZ5HAM6spzb7ya uVQYrrRkFyX7XYrRITOo5ugVwF1ysWddeg88R4EUsQYzoL1WziJ7aXLpfpFfUH4jqub3 lxrNcD8ovTapcTfOsgr5X/tZH3xEFBDNZtLgKNHG9zmFTVD57zcOG0ZoDfGvnz1CxOfZ EzbO2yx96H50eLu4VrGOyy3D/HGc5mzz4vkoehAaXacyzhLgtZTjRQSQP7ixhtBSMVSM 8kzA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=qqEIzpW6bVho6E71XzYOaAM7LAFWKOmumLm18Xq0LQw=; b=srzo0BAhubBdxB7ISSMXzrSI1GjCk2pkEXA34KyIXUfw9wWff08D4RvMPIs0If9Ms0 5REXMr4GFyWzCz00IoNFiIOS7VWM7b5Ze7/WNaM8g+koDZMlVIpfgdKtMW0Rqcq3fjDJ 2jhPaqwvhk7mXrCHyGSESi2Nrgp3kno/GkCIbVAE3jeW+bNd+o9VxHwmRXSBlPmDhjq2 5R/nGV+zILGjqBxW0xf+lZWO+7Kuw2a0s4agXw7XIMSXJ4kru83jxlj/S5Mldwd6iFZU kgyjra1Vuc4fCPxo+XOwAYkQup420NICuZgdT2gxnUo9J9Ed70xHyubG0MXLPZ/SeNZf j1hA== X-Gm-Message-State: AOUpUlHm3U1+9UspXncSIOXBFOKrWBSY7Mz0IMlAxRnhbph9QPhuiR8N m9lYW9LLjyRoGn6RSdIgSG1X6BqZ X-Received: by 2002:a63:d518:: with SMTP id c24-v6mr13447400pgg.357.1532372977023; Mon, 23 Jul 2018 12:09:37 -0700 (PDT) Received: from localhost.localdomain ([2601:646:877f:9499::ee7a]) by smtp.gmail.com with ESMTPSA id p64-v6sm15696389pfa.47.2018.07.23.12.09.36 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 23 Jul 2018 12:09:36 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Mon, 23 Jul 2018 12:09:28 -0700 Message-Id: <20180723190928.27368-1-raj.khem@gmail.com> X-Mailer: git-send-email 2.18.0 Subject: [OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org This has been an opt-in for so long, some distributions e.g. poky-lsb uses it by default however, since most of linux distros have started to default to these settings for security enhancements, time has come for OE to make it default too Signed-off-by: Khem Raj --- meta/conf/distro/defaultsetup.conf | 1 + 1 file changed, 1 insertion(+) -- 2.18.0 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/conf/distro/defaultsetup.conf b/meta/conf/distro/defaultsetup.conf index ca2f9178d2..352e279596 100644 --- a/meta/conf/distro/defaultsetup.conf +++ b/meta/conf/distro/defaultsetup.conf @@ -1,6 +1,7 @@ include conf/distro/include/default-providers.inc include conf/distro/include/default-versions.inc include conf/distro/include/default-distrovars.inc +require conf/distro/include/security_flags.inc include conf/distro/include/world-broken.inc TCMODE ?= "default"