[OE-core] [PATCH] python3: security: disable -pie -fpie from Python3 compilation CFLAGS when security_flags is inherited.

[Kuutela, Topi]

Several Python3 modules require use shared objects but -pie and -fpie GCC options are not compatible with -shared. This causes linker error which are not displayed during bitbake execution (unless verbose options are used) but the .so files are not generated or included in the image. 

> -----Original Message-----
> From: Jussi Kukkonen [mailto:jussi.kukkonen at intel.com]
> Sent: Thursday, August 6, 2015 1:31 PM
> To: Kuutela, Topi
> Cc: Patches and discussions about the oe-core layer
> Subject: Re: [OE-core] [PATCH] python3: security: disable -pie -fpie from
> Python3 compilation CFLAGS when security_flags is inherited.
> 
> On 6 August 2015 at 12:54, Topi Kuutela <topi.kuutela at intel.com> wrote:
> > Signed-off-by: Topi Kuutela <topi.kuutela at intel.com>
> 
> Could you add an explanation why this change is done? Also, maybe cut the
> the subject line length to something more reasonable if you're re-submitting.
> 
> Jussi
> 
> > ---
> >  meta/conf/distro/include/security_flags.inc | 1 +
> >  1 file changed, 1 insertion(+)
> >
> > diff --git a/meta/conf/distro/include/security_flags.inc
> > b/meta/conf/distro/include/security_flags.inc
> > index 3724972..ff600fa 100644
> > --- a/meta/conf/distro/include/security_flags.inc
> > +++ b/meta/conf/distro/include/security_flags.inc
> > @@ -82,6 +82,7 @@ SECURITY_CFLAGS_pn-python-imaging =
> "${SECURITY_NO_PIE_CFLAGS}"
> >  SECURITY_CFLAGS_pn-python-pycurl = "${SECURITY_NO_PIE_CFLAGS}"
> >  SECURITY_CFLAGS_pn-python-smartpm =
> "${SECURITY_NO_PIE_CFLAGS}"
> >  SECURITY_CFLAGS_pn-python-numpy = "${SECURITY_NO_PIE_CFLAGS}"
> > +SECURITY_CFLAGS_pn-python3 = "${SECURITY_NO_PIE_CFLAGS}"
> >  SECURITY_CFLAGS_pn-tcl = "${SECURITY_NO_PIE_CFLAGS}"
> >  SECURITY_CFLAGS_pn-tiff = "${SECURITY_NO_PIE_CFLAGS}"
> >  SECURITY_CFLAGS_pn-valgrind = "${SECURITY_NO_PIE_CFLAGS}"
> > --
> > 2.4.3
> >
> > ---------------------------------------------------------------------
> > Intel Finland Oy
> > Registered Address: PL 281, 00181 Helsinki Business Identity Code:
> > 0357606 - 4 Domiciled in Helsinki
> >
> > This e-mail and any attachments may contain confidential material for
> > the sole use of the intended recipient(s). Any review or distribution
> > by others is strictly prohibited. If you are not the intended
> > recipient, please contact the sender and delete all copies.
> >
> > --
> > _______________________________________________
> > Openembedded-core mailing list
> > Openembedded-core at lists.openembedded.org
> > http://lists.openembedded.org/mailman/listinfo/openembedded-core
---------------------------------------------------------------------
Intel Finland Oy
Registered Address: PL 281, 00181 Helsinki 
Business Identity Code: 0357606 - 4 
Domiciled in Helsinki 

This e-mail and any attachments may contain confidential material for
the sole use of the intended recipient(s). Any review or distribution
by others is strictly prohibited. If you are not the intended
recipient, please contact the sender and delete all copies.