In oe-core scarthgap, security_flags.inc[0] was NOT loaded by default in defaultsetup.conf, allowing benchmarks to run with minimal overhead.
In oe-core master, security_flags.inc is NOW loaded by default[1], enabling all security hardening flags during arm-benchmarks compilation, causing significant performance degradation. Add distro-level override to disable security flags for arm-benchmarks, restoring benchmark accuracy for industry-standard fair comparison while maintaining full security hardening for all production binaries [0]: https://git.openembedded.org/openembedded-core/tree/meta/conf/distro/include/security_flags.inc [1]: https://git.openembedded.org/openembedded-core/commit/meta/conf/distro/defaultsetup.conf?id=4c2d64c10a5b0437ab1ea04df22386f0f95124d1 Signed-off-by: Telukula Jeevan Kumar Sahu <[email protected]> --- meta-arago-distro/conf/distro/arago.conf | 1 + meta-arago-distro/conf/distro/include/arago-security.inc | 3 +++ 2 files changed, 4 insertions(+) create mode 100644 meta-arago-distro/conf/distro/include/arago-security.inc diff --git a/meta-arago-distro/conf/distro/arago.conf b/meta-arago-distro/conf/distro/arago.conf index 43d4db53..6987d0dd 100644 --- a/meta-arago-distro/conf/distro/arago.conf +++ b/meta-arago-distro/conf/distro/arago.conf @@ -137,6 +137,7 @@ ARAGO_IMAGE_SUFFIX:append = "${@oe.utils.conditional("ARAGO_RT_ENABLE", "1", "-r # Load default preferences require conf/distro/include/arago-prefs.inc +require conf/distro/include/arago-security.inc # Allow branding on top of Arago Distro and Core TI-SDK # If ARAGO_BRAND is not set in local.conf, default to core diff --git a/meta-arago-distro/conf/distro/include/arago-security.inc b/meta-arago-distro/conf/distro/include/arago-security.inc new file mode 100644 index 00000000..65107430 --- /dev/null +++ b/meta-arago-distro/conf/distro/include/arago-security.inc @@ -0,0 +1,3 @@ +# Override security hardening for performance benchmarks +SECURITY_CFLAGS:pn-arm-benchmarks = "" +SECURITY_STACK_PROTECTOR:pn-arm-benchmarks = "" -- 2.34.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#17363): https://lists.yoctoproject.org/g/meta-arago/message/17363 Mute This Topic: https://lists.yoctoproject.org/mt/118369925/21656 Group Owner: [email protected] Unsubscribe: https://lists.yoctoproject.org/g/meta-arago/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
