<div dir="auto"><p style="margin-top:0px;margin-bottom:0px;font-family:calibri,arial,helvetica,sans-serif;font-size:16px"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">When building a SDK from a DISTRO with security flags enabled, options added to</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">CC and LDFLAGS are not replicated in the SDK environment script.</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">This could lead to some situations where an application compiled with</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">the SDK and having some security weaknesses correctly runs on target but</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">crashes once integrated to the core image built with the full Yocto</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">stack.</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">Signed-off-by: Antoine Manache &lt;<a href="mailto:a.manache@gmail.com" style="text-decoration-line:none;color:rgb(66,133,244)">a.manache@gmail.com</a>&gt;</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">---</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"> meta/conf/distro/include/security_flags.inc | 2 ++</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"> 1 file changed, 2 insertions(+)</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">index 620978a8ed..329482bfa3 100644</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">--- a/meta/conf/distro/include/security_flags.inc</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">+++ b/meta/conf/distro/include/security_flags.inc</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">@@ -56,7 +56,9 @@ SECURITY_STRINGFORMAT_pn-busybox = &quot;&quot;</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"> SECURITY_STRINGFORMAT_pn-gcc = &quot;&quot;</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"> </span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"> TARGET_CC_ARCH_append_class-target = &quot; ${SECURITY_CFLAGS}&quot;</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">+TARGET_CC_ARCH_append_class-cross-canadian = &quot; ${SECURITY_CFLAGS}&quot;</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"> TARGET_LDFLAGS_append_class-target = &quot; ${SECURITY_LDFLAGS}&quot;</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">+TARGET_LDFLAGS_append_class-cross-canadian = &quot; ${SECURITY_LDFLAGS}&quot;</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"> </span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"> SECURITY_STACK_PROTECTOR_pn-gcc-runtime = &quot;&quot;</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"> SECURITY_STACK_PROTECTOR_pn-glibc = &quot;&quot;</span></p><div dir="auto" style="color:rgb(136,136,136);font-family:calibri,arial,helvetica,sans-serif;font-size:16px"><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">--</span><br style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt">2.11.0</span></div><div dir="auto" style="color:rgb(136,136,136);font-family:calibri,arial,helvetica,sans-serif;font-size:16px"><span style="font-family:&#39;consolas&#39;,monospace;font-size:10pt"><br></span></div></div>