[OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

[Khem Raj]

On Mon, Jul 23, 2018 at 11:42 PM Anuj Mittal <anuj.mittal at intel.com> wrote:
>
> On 07/24/2018 03:09 AM, Khem Raj wrote:
> > This has been an opt-in for so long, some distributions e.g.
> > poky-lsb uses it by default however, since most of linux
> > distros have started to default to these settings for security
> > enhancements, time has come for OE to make it default too
>
> Should be removed from poky-lsb in that case otherwise gives duplicate
> inclusion warnings.
>

yes. after this patch lands we can do that.

> >
> > Signed-off-by: Khem Raj <raj.khem at gmail.com>
> > ---
> >  meta/conf/distro/defaultsetup.conf | 1 +
> >  1 file changed, 1 insertion(+)
> >
> > diff --git a/meta/conf/distro/defaultsetup.conf b/meta/conf/distro/defaultsetup.conf
> > index ca2f9178d2..352e279596 100644
> > --- a/meta/conf/distro/defaultsetup.conf
> > +++ b/meta/conf/distro/defaultsetup.conf
> > @@ -1,6 +1,7 @@
> >  include conf/distro/include/default-providers.inc
> >  include conf/distro/include/default-versions.inc
> >  include conf/distro/include/default-distrovars.inc
> > +require conf/distro/include/security_flags.inc
> >  include conf/distro/include/world-broken.inc
> >
> >  TCMODE ?= "default"
> >
>