[oe-commits] Enrico Scholz : openssl: build always with -Wa, --noexecstack
git at git.openembedded.org
git at git.openembedded.org
Mon Mar 18 00:07:05 UTC 2013
Module: openembedded-core.git
Branch: master-next
Commit: 17ef45d17516c97ffe4d0b9eb480a9713631984f
URL: http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=17ef45d17516c97ffe4d0b9eb480a9713631984f
Author: Enrico Scholz <enrico.scholz at sigma-chemnitz.de>
Date: Thu Jan 12 17:30:21 2012 +0100
openssl: build always with -Wa,--noexecstack
There is no reason to disable exec-stack only for -native builds;
binaries on the target will suffer from the same SELinux ACLs.
OpenSSL does not use executable stack so this option can be disabled
unconditionally.
Signed-off-by: Enrico Scholz <enrico.scholz at sigma-chemnitz.de>
Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
---
meta/recipes-connectivity/openssl/openssl.inc | 8 +++-----
1 files changed, 3 insertions(+), 5 deletions(-)
diff --git a/meta/recipes-connectivity/openssl/openssl.inc b/meta/recipes-connectivity/openssl/openssl.inc
index af1922e..f5b2432 100644
--- a/meta/recipes-connectivity/openssl/openssl.inc
+++ b/meta/recipes-connectivity/openssl/openssl.inc
@@ -18,12 +18,10 @@ SRC_URI = "http://www.openssl.org/source/openssl-${PV}.tar.gz \
S = "${WORKDIR}/openssl-${PV}"
AR_append = " r"
+# Avoid binaries being marked as requiring an executable stack since it
+# doesn't(which causes and this causes issues with SELinux
CFLAG = "${@base_conditional('SITEINFO_ENDIANNESS', 'le', '-DL_ENDIAN', '-DB_ENDIAN', d)} \
- -DTERMIO ${CFLAGS} -Wall"
-
-# Avoid binaries being marked as requiring an executable stack (which causes
-# issues with SELinux on the host)
-CFLAG_append_class-native = " -Wa,--noexecstack"
+ -DTERMIO ${CFLAGS} -Wall -Wa,--noexecstack"
# -02 does not work on mipsel: ssh hangs when it tries to read /dev/urandom
CFLAG_mtx-1 := "${@'${CFLAG}'.replace('-O2', '')}"
More information about the Openembedded-commits
mailing list