From: Denys Dmytriyenko <[email protected]>
Signed-off-by: Denys Dmytriyenko <[email protected]>
---
meta-arago-distro/conf/distro/arago.conf | 12 +++++++++---
1 file changed, 9 insertions(+), 3 deletions(-)
diff --git a/meta-arago-distro/conf/distro/arago.conf
b/meta-arago-distro/conf/distro/arago.conf
index c597e1d..b928acd 100644
--- a/meta-arago-distro/conf/distro/arago.conf
+++ b/meta-arago-distro/conf/distro/arago.conf
@@ -54,9 +54,15 @@ TOOLCHAIN_BRAND ?= "${@[d.getVar('TC_SANE_DEFAULT',
True),'gcc'][d.getVar('TOOLC
require conf/distro/include/toolchain-${TOOLCHAIN_BRAND}.inc
require conf/distro/include/toolchain-${TOOLCHAIN_TYPE}.inc
-# Enable basic stack and buffer overflow protections
-#TARGET_CPPFLAGS += "-fstack-protector -D_FORTIFY_SOURCE=1"
-TARGET_CPPFLAGS += "-fstack-protector"
+# Enable default stack and buffer overflow protections
+require conf/distro/include/security_flags.inc
+SECURITY_CFLAGS_pn-elfutils = "${SECURITY_NO_PIE_CFLAGS}"
+SECURITY_CFLAGS_pn-leveldb = "${SECURITY_NO_PIE_CFLAGS}"
+SECURITY_CFLAGS_pn-bash = "${SECURITY_NO_PIE_CFLAGS}"
+SECURITY_CFLAGS_pn-mariadb = "${SECURITY_NO_PIE_CFLAGS}"
+SECURITY_CFLAGS_pn-php = "${SECURITY_NO_PIE_CFLAGS}"
+SECURITY_CFLAGS_pn-qtbase = "${SECURITY_NO_PIE_CFLAGS}"
+SECURITY_CFLAGS_pn-ltp-ddt = "-fstack-protector"
# Load default preferences
require conf/distro/include/arago-prefs.inc
--
2.2.0
_______________________________________________
meta-arago mailing list
[email protected]
http://arago-project.org/cgi-bin/mailman/listinfo/meta-arago
