[OE-core] [PATCH] security_flags.inc: enable PIE for a few recipes

[Burton, Ross]

On 8 August 2016 at 15:07, Alexander Kanavin <
alexander.kanavin at linux.intel.com> wrote:

> -SECURITY_CFLAGS_pn-mesa-gl = "${SECURITY_NO_PIE_CFLAGS}"
>

Did you test this?

For intel-corei7-64 with hardening enabled it fails like this:

|
/data/poky-master/tmp-glibc/sysroots/intel-corei7-64/usr/lib/libc_nonshared.a(elf-init.oS):
In function `__libc_csu_init':
| /usr/src/debug/glibc/2.24-r0/git/csu/elf-init.c:86: undefined reference
to `__init_array_start'
|
/data/poky-master/tmp-glibc/sysroots/x86_64-linux/usr/libexec/x86_64-poky-linux/gcc/x86_64-poky-linux/6.1.1/ld:
/data/poky-master/tmp-glibc/sysroots/intel-corei7-64/usr/lib/libc_nonshared.a(elf-init.oS):
relocation R_X86_64_PC32 against undefined hidden symbol
`__init_array_start' can not be used when making a shared object
|
/data/poky-master/tmp-glibc/sysroots/x86_64-linux/usr/libexec/x86_64-poky-linux/gcc/x86_64-poky-linux/6.1.1/ld:
final link failed: Bad value
| collect2: error: ld returned 1 exit status
| Makefile:678: recipe for target 'mesa_dri_drivers.la' failed

Ross
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openembedded.org/pipermail/openembedded-core/attachments/20160808/42f34268/attachment-0002.html>