From d3b4b6d504f0221b4005328660232aad6b03c6fd Mon Sep 17 00:00:00 2001 From: Huang Xin Date: Sun, 3 Jul 2022 20:02:46 -0700 Subject: [PATCH] Add security flags --- .../conf/mt8516/aud8516p1v2-consys-slc-128/local.conf.sample | 1 + meta/poky/meta/conf/distro/include/security_flags.inc | 2 ++ 2 files changed, 3 insertions(+) diff --git a/meta/base/conf/mt8516/aud8516p1v2-consys-slc-128/local.conf.sample b/meta/base/conf/mt8516/aud8516p1v2-consys-slc-128/local.conf.sample index ed9afdc66..28567fdd5 100644 --- a/meta/base/conf/mt8516/aud8516p1v2-consys-slc-128/local.conf.sample +++ b/meta/base/conf/mt8516/aud8516p1v2-consys-slc-128/local.conf.sample @@ -1,3 +1,4 @@ +require conf/distro/include/security_flags.inc MACHINE ??= "aud8516p1v2-consys-slc-128" DISTRO ?= "poky-aud-systemd" PACKAGE_CLASSES ?= "package_rpm" diff --git a/meta/poky/meta/conf/distro/include/security_flags.inc b/meta/poky/meta/conf/distro/include/security_flags.inc index ccfd32b1e..3c4807d75 100644 --- a/meta/poky/meta/conf/distro/include/security_flags.inc +++ b/meta/poky/meta/conf/distro/include/security_flags.inc @@ -89,6 +89,7 @@ SECURITY_CFLAGS_pn-uclibc-initial = "" SECURITY_CFLAGS_pn-valgrind = "" SECURITY_CFLAGS_pn-zlib = "${SECURITY_NO_PIE_CFLAGS}" SECURITY_CFLAGS_pn-zeromq = "${SECURITY_NO_PIE_CFLAGS}" +SECURITY_CFLAGS_pn-softhsm2 += " -fPIC" # Recipes which fail to compile when elevating -Wformat-security to an error SECURITY_STRINGFORMAT_pn-busybox = "" @@ -117,5 +118,6 @@ SECURITY_LDFLAGS_pn-xf86-video-omap = "${SECURITY_X_LDFLAGS}" SECURITY_LDFLAGS_pn-xf86-video-vesa = "${SECURITY_X_LDFLAGS}" SECURITY_LDFLAGS_pn-xf86-video-vmware = "${SECURITY_X_LDFLAGS}" SECURITY_LDFLAGS_pn-xserver-xorg = "${SECURITY_X_LDFLAGS}" +SECURITY_LDFLAGS_pn-softhsm2 += " -fPIC" TARGET_CC_ARCH_append_pn-binutils = " ${SECURITY_CFLAGS} ${SELECTED_OPTIMIZATION}"