[oe-commits] Graeme Gregory : openssl-native_0.9.8j.bb : set the noexec bit for stacks

[git version control]

Module: openembedded.git
Branch: shr/merge
Commit: 7159f335cf884e143cb7dcbb0f448bca60bb43ae
URL:    http://gitweb.openembedded.net/?p=openembedded.git&a=commit;h=7159f335cf884e143cb7dcbb0f448bca60bb43ae

Author: Graeme Gregory <dp at xora.org.uk>
Date:   Thu Dec  3 13:16:11 2009 +0000

openssl-native_0.9.8j.bb : set the noexec bit for stacks

This is needed to stop tripping up security protections on Fedora 12 and
probably other selinux using distros

---

 recipes/openssl/openssl-native_0.9.8j.bb |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)

diff --git a/recipes/openssl/openssl-native_0.9.8j.bb b/recipes/openssl/openssl-native_0.9.8j.bb
index 976a4d7..eba3ba9 100644
--- a/recipes/openssl/openssl-native_0.9.8j.bb
+++ b/recipes/openssl/openssl-native_0.9.8j.bb
@@ -2,7 +2,7 @@ inherit pkgconfig native
 
 require openssl.inc
 
-PR = "${INC_PR}.0"
+PR = "${INC_PR}.1"
 
 # This flag can contain target options (e.g -mfpu=neon for armv7-a systems)
 export FULL_OPTIMIZATION = " "
@@ -14,6 +14,8 @@ SRC_URI += "file://configure-targets.patch;patch=1 \
 
 PARALLEL_MAKE = ""
 
+CFLAG += " -Wa,--noexecstack "
+
 do_install() {
 	:
 }