From patchwork Sun Aug 19 17:23:34 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 144533 Delivered-To: patch@linaro.org Received: by 2002:a2e:9754:0:0:0:0:0 with SMTP id f20-v6csp3089514ljj; Sun, 19 Aug 2018 10:24:04 -0700 (PDT) X-Google-Smtp-Source: AA+uWPzWKyK28udKDB4en0UJRklw2XzpvKaOUVJAZRSE6dzTNX/OU2R3gviFD+SGhRH83lYkkUVh X-Received: by 2002:a17:902:1e6:: with SMTP id b93-v6mr42212195plb.149.1534699444571; Sun, 19 Aug 2018 10:24:04 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1534699444; cv=none; d=google.com; s=arc-20160816; b=CVC2aI55RomJ1PT545QAGVEayO7zOGf/IWqC34xoXh1EB8VWHWnCUNesmEz/EFV/16 SXIrKPJCbH7LbPtq7WLHa0Bikm0bQi3JKYfzSym3N4dJxYGjH/u2EfEqQb969epZWjyI Jf/v32BzbSGb+B7OzpsADVGfBt7marGopkYjcelJly/quejD9ILgZ5HHPy1d/y0yZXkB Ei4rqhTvyQvl3CBgyPzqQg+A+U01wbAVb9DiyCDVmy3YK6c4maEOErpn01NpFp2nQp1u zYFa+02Vx3q2Qz8bXb+ls8oPTCypZBjaJgMb82dfIuCHnRjvkrUKKRtQnJPJm+udHYnM hjbg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=MxnZ+q4APzMB2/cReEI2Xl5Qe5t+zN+jAeeiy0vv5Lk=; b=Vsw4RO1APD4uPpMMztsIyzg0FjTha3oUD129RxylYfvhF827iZoXJ/vKteCaG8Pn8Y /44tQW2/wteRj4fJgzcFtOyWjj8F2mDxuQ3jeQqEQlKNfwlxTbW8V9CQHk+5g0pPmkY4 ZuFGlUBDM/a/tHrf/Jo3TNA6zZWkq6qO4M2TMIgjkYJjBIZSqnamO2goWK8YbMRJ1Ftm BF4DUH6XnkymQPE9Dc6LSzh3MGXlk8ZN644fGV/4/EgyTRe/DaeEOQtfMS9vTwK4OliJ MB1u3gG9JSKEMoCLwwuaafAHNJ2081KJ6dRxPwnqkcuLLFz9ar6PY9psfbm4SYlIabPQ 2yaA== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.s=20161025 header.b=nRb3kj8U; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id 31-v6si878888pgk.95.2018.08.19.10.24.04; Sun, 19 Aug 2018 10:24:04 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.s=20161025 header.b=nRb3kj8U; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: from layers.openembedded.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id E285F79244; Sun, 19 Aug 2018 17:23:57 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pl0-f67.google.com (mail-pl0-f67.google.com [209.85.160.67]) by mail.openembedded.org (Postfix) with ESMTP id C135679229 for ; Sun, 19 Aug 2018 17:23:49 +0000 (UTC) Received: by mail-pl0-f67.google.com with SMTP id s17-v6so5944857plp.7 for ; Sun, 19 Aug 2018 10:23:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=aRwH16y3FbAMWaCGvwYkkhLhkfCbhgR8G/jyQGSXQkg=; b=nRb3kj8Uri4JZxo6g6f7x8yCQ760oZB+kAA8IQwnZvuZC7IxSpc8hAb8yOvY2TyDTY KRcwwz15RC7Lv3ftzdkjGKzT4WcRmibgsvsvMyX2RPyLyZUSgPxIsZ3q0B6VP+NYzPP9 WLkSlNlaP8QKKfgrmCe/s4JkK+NGSyqErL5doeGRmZmZnwCIN/S3/SW/ldGLMwRLbaOM ljuDlUe1dZeBlYl/u4IrITRmNcgZsK4tErFs/0c9lTGHQc9E9Hiav1n5B0BzJ7RD8PHb Nzol3x8tSZrrIPbtTpbPCECPact7iZYsaCX+A/HWh7YTG7V4BHgCj9BQU9Sgq9Tzmrtp px5Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=aRwH16y3FbAMWaCGvwYkkhLhkfCbhgR8G/jyQGSXQkg=; b=KvE7wEMLFJ1w9FRZtMS+Okw8nxYnkcu9h700zv5YspvosV7ca1KIP4AVihcI1UyTfy pZs0u1YlCQEIUH2/ce/vw/MyRy4CLM9Vyf+AzJq+Jxs/VAVZymwB32BEgwW2nHffUFuT QVc/SUvHkO+yAvpJ0x8c40hvrsEvC7L3PfC38zYGWDk6wpMDmeBrd9glfrthLxwqFEVZ j2PTF9S8HieggdxoLL0cNHkUReRixaV6wVUl/SeLbhT21rZvemBiAOz4s78KTX2b7F+O +A7mJ+pmYpHqdyDjZ/5BpKwaZzTvbyXHDxbmo+5lXvw4P6a0bVAexDPjvF8UWslfQJw6 iLDA== X-Gm-Message-State: AOUpUlHhtht05/uh3V/q9UtbtiPIoP1TcL37+kG7Y91POsg2uGngXHyc rBQryuvEDKAlmd3bZ0baavmtiH76 X-Received: by 2002:a17:902:724c:: with SMTP id c12-v6mr41497663pll.326.1534699430846; Sun, 19 Aug 2018 10:23:50 -0700 (PDT) Received: from localhost.localdomain ([2601:646:877f:9499::4add]) by smtp.gmail.com with ESMTPSA id x1-v6sm8293466pgr.59.2018.08.19.10.23.49 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 19 Aug 2018 10:23:49 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Sun, 19 Aug 2018 10:23:34 -0700 Message-Id: <93fb315a5076ddc79d1dc113c8f099db2d3f61b2.1534699224.git.raj.khem@gmail.com> X-Mailer: git-send-email 2.18.0 In-Reply-To: References: Subject: [OE-core] [PATCH 2/9] powerpc: Remove pie flags from compiler cmdline X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org Original approach to add -no- flags cause link time behavior changes where packages start to lose the -fPIC -DPIC in compiler cmdline and this list keeps growing as we build more and more packages, Instead lets just remove the options we dont need from SECURITY_CFLAGS this makes it more robust and less intrusive This also means we do not need to re-add pic options as we started to do for affected packages Signed-off-by: Khem Raj --- meta/conf/distro/include/security_flags.inc | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) -- 2.18.0 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc index 52e1e4ebc5..4e20a4d0f8 100644 --- a/meta/conf/distro/include/security_flags.inc +++ b/meta/conf/distro/include/security_flags.inc @@ -28,13 +28,10 @@ SECURITY_LDFLAGS ?= "-fstack-protector-strong -Wl,-z,relro,-z,now" SECURITY_X_LDFLAGS ?= "-fstack-protector-strong -Wl,-z,relro" # powerpc does not get on with pie for reasons not looked into as yet -SECURITY_CFLAGS_powerpc = "-fstack-protector-strong ${lcl_maybe_fortify} ${SECURITY_NOPIE_CFLAGS}" -SECURITY_CFLAGS_pn-libgcc_powerpc = "" -SECURITY_CFLAGS_append_powerpc_pn-libdrm = " -fPIC -DPIC" -SECURITY_CFLAGS_append_powerpc_pn-libinput = " -fPIC -DPIC" -SECURITY_CFLAGS_append_powerpc_pn-at-spi2-core = " -fPIC -DPIC" GCCPIE_powerpc = "" GLIBCPIE_powerpc = "" +SECURITY_CFLAGS_remove_powerpc = "${SECURITY_PIE_CFLAGS}" +SECURITY_CFLAGS_pn-libgcc_powerpc = "" SECURITY_CFLAGS_pn-glibc = "" SECURITY_CFLAGS_pn-glibc-initial = ""