From patchwork Fri May 26 16:15:01 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 100579 Delivered-To: patch@linaro.org Received: by 10.140.96.100 with SMTP id j91csp327872qge; Fri, 26 May 2017 09:15:17 -0700 (PDT) X-Received: by 10.99.2.68 with SMTP id 65mr3346982pgc.61.1495815317155; Fri, 26 May 2017 09:15:17 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1495815317; cv=none; d=google.com; s=arc-20160816; b=qiVNP1KE+rPQEIuCb7rkpLcFeL0IJ5gMIeaxvT6bO89OzMf9t0ZKE1NRHWXbU1lLPW L6j8GWqQH1YdqiAO734POpizYeBpF7BW5LyErJImT+2HYSd8iSLUWTHH6dP/A4YFhqdY HI8tx7DZCE11eof92yWXHf8jkET3ml52OMBbVFIThbieFLgHzE2K8Gu+KEdObccaBLvr Md8QsH7E4mygsqOE7p2c71nM3ydzw1JGuwEY48sfddcoDXcm8kdkMRs/4+TPuTuuLMJR QR1LQjUa5tTyYqgdipJKsrjirt5P2No3dThc1vpaKzq2p9OGLnkhPYlRSE9ei4QcYkAN PW/g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=cIB76Ie2SoiP0g/cm2QNR+GNnHy/ZXDT8wExEha/hUo=; b=pkh/OOy5cb58IE9kJojOrILqrkCyF4mXu3E5HoIcFxGox6DZhn982HESMaVgd0vJMW dykH9h+CnQTl/NDaxZ2WsbuKt5v6dcJfvZWitCLj/g7nCXPMIwSBe+AAXkvMAdewL2ZZ DCyBtAcw6kYQ9O0bx4FqRitA/kFitPpg3C8cW/+mfelvBnB1OIMcFf7GfDYac2tby1Ym te1+aiDKLdOmQA50kBsoRAMyDpgqz1QCJwqhTD3m/vvhJjSIqrjjUYpsMD9bH/GwlOJ5 OZrPpbwMhOL0vfbu/il4WwxkbCogDBmMlUZT+Rm4NlsJp5aIT+4lK51rWxcCcoeNQwoN M92A== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id d10si1321231pfe.85.2017.05.26.09.15.16; Fri, 26 May 2017 09:15:17 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 818D678283; Fri, 26 May 2017 16:15:13 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pf0-f196.google.com (mail-pf0-f196.google.com [209.85.192.196]) by mail.openembedded.org (Postfix) with ESMTP id 6DBF578280 for ; Fri, 26 May 2017 16:15:11 +0000 (UTC) Received: by mail-pf0-f196.google.com with SMTP id n23so3782369pfb.3 for ; Fri, 26 May 2017 09:15:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=8Uva9W7Pv7myl5krzIH+ih3BEHnzvIaOL3fwhyeaE+I=; b=QM56B9X00gSbWGXMvOBDVbVGZfG6YHYRzI5BjBifDToA5Fi6LAarM+0xIwpdHF6Uwd g73sQnmgq9LL+4hgXS41fCuwrAUTC9F9sg6/peijwMNLMeWp72pMjPX29wtQdUuk5TgX H40FZqP3SfhM78q5ryIzWDrJN2TRepjsoAfExiWQNFtvWlcOQ8bDIy85Z4lw0A+4uvdx 1OEU9lH8C5NxLKDc62kssr8ml9w2pODpXFZnt9y84rnYojQG1OGhWXHDQpcCvTw9OOh7 h0S71MNyQYCAIcXS44UxPRrCUkrwVj2/tBkqLngpEUNtoT8P8AAtk3BjVb5rgfGucBBU Q68w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=8Uva9W7Pv7myl5krzIH+ih3BEHnzvIaOL3fwhyeaE+I=; b=JFgX7TIsDgEZQLiSwFJiuV1kCHXLgOPfuZShBZ8QnUTGzmrtP4ZxeYi3/smNds4vUM lzoCTm9hjBH+STaV1yraHdUUmS972RdszhhCWupUK1k6w6zORDVMyalrYLu7yHe1scw6 aPP8nmsfqlwbQBil/wQlG4IGaNl0OlL1KhGWYp6NmiS7uajgy1mkC4e2wc7m+q/Y5ciE eVVkSpM4UUctb3igc5+w5+gHsxyPK9GnCkD+64ZHszLOoz1Ti6AeHHND0SN190Tb1UEX lTdv7/g794VfrObV7DL7B6nmgPZYzdk0VZLdIjRveaXpSaXZYvkqSMwTpQgONouIlVRF P0PA== X-Gm-Message-State: AODbwcBwoORrByocTDvtfP2lea8ykmppsWY7oCjqn+ylb3ZUsWGE9qix QggiXmQBUSA3CQ== X-Received: by 10.84.217.218 with SMTP id d26mr60031802plj.47.1495815312645; Fri, 26 May 2017 09:15:12 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::63fb]) by smtp.gmail.com with ESMTPSA id f72sm2723752pfe.62.2017.05.26.09.15.11 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 26 May 2017 09:15:11 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Fri, 26 May 2017 09:15:01 -0700 Message-Id: <20170526161501.30122-2-raj.khem@gmail.com> X-Mailer: git-send-email 2.13.0 In-Reply-To: <20170526161501.30122-1-raj.khem@gmail.com> References: <20170526161501.30122-1-raj.khem@gmail.com> Subject: [OE-core] [PATCH 2/2] glibc: Configure with extra hardening options X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org Signed-off-by: Khem Raj --- meta/recipes-core/glibc/glibc_2.25.bb | 4 ++++ 1 file changed, 4 insertions(+) -- 2.13.0 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-core/glibc/glibc_2.25.bb b/meta/recipes-core/glibc/glibc_2.25.bb index ab6fbbea2a..83a1249b8c 100644 --- a/meta/recipes-core/glibc/glibc_2.25.bb +++ b/meta/recipes-core/glibc/glibc_2.25.bb @@ -77,6 +77,10 @@ EXTRA_OECONF = "--enable-kernel=${OLDEST_KERNEL} \ --with-headers=${STAGING_INCDIR} \ --without-selinux \ --enable-obsolete-rpc \ + --enable-tunables \ + --enable-bind-now \ + --enable-stack-protector=strong \ + --enable-stackguard-randomization \ ${GLIBC_EXTRA_OECONF}" EXTRA_OECONF += "${@get_libc_fpu_setting(bb, d)}"