From: Jan Kiszka <[email protected]> We currently cannot resolve them better, also due to external dependencies on gnu-efi (see [1]), and systemd-boot does the same.
[1] https://sourceforge.net/p/gnu-efi/mailman/message/37684742/ Reported-by: Tobias Schmidl <[email protected]> Signed-off-by: Jan Kiszka <[email protected]> --- Makefile.am | 3 +++ configure.ac | 10 ++++++++++ 2 files changed, 13 insertions(+) diff --git a/Makefile.am b/Makefile.am index 856908f..95b82df 100644 --- a/Makefile.am +++ b/Makefile.am @@ -228,6 +228,7 @@ efi_ldflags = \ -nostdlib \ -znocombreloc \ --warn-common \ + $(LDFLAGS_NO_WARN_EXECSTACK) \ --no-undefined \ --fatal-warnings \ -L $(GNUEFI_LIB_DIR) \ @@ -240,6 +241,8 @@ else # hence set subsystem 0xa (EFI application) and binary format. objcopy_format = -O binary efi_ldflags += --defsym=EFI_SUBSYSTEM=0xa +# Also suppress RWX segment warnings until we have a better solution +efi_ldflags += $(LDFLAGS_NO_WARN_RWX_SEGMENTS) endif efi_objects_pre1 = $(efi_sources:.c=.o) diff --git a/configure.ac b/configure.ac index d39b5fa..a6cf658 100644 --- a/configure.ac +++ b/configure.ac @@ -112,6 +112,16 @@ AX_CHECK_COMPILE_FLAG([-mgeneral-regs-only], [CFLAGS_MGENERAL_REGS_ONLY=]) AC_SUBST([CFLAGS_MGENERAL_REGS_ONLY]) +AX_CHECK_LINK_FLAG([-Wl,--no-warn-rwx-segments], + [LDFLAGS_NO_WARN_RWX_SEGMENTS=--no-warn-rwx-segments], + [LDFLAGS_NO_WARN_RWX_SEGMENTS=]) +AC_SUBST([LDFLAGS_NO_WARN_RWX_SEGMENTS]) + +AX_CHECK_LINK_FLAG([-Wl,--no-warn-execstack], + [LDFLAGS_NO_WARN_EXECSTACK=--no-warn-execstack], + [LDFLAGS_NO_WARN_EXECSTACK=]) +AC_SUBST([LDFLAGS_NO_WARN_EXECSTACK]) + # Checks from autoscan: AC_CHECK_FUNCS([getmntent]) AC_CHECK_FUNCS([memset]) -- 2.35.3 -- You received this message because you are subscribed to the Google Groups "EFI Boot Guard" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/efibootguard-dev/0fb45c7f-05c4-cbb1-2569-177b426b1015%40siemens.com.
