diff options
| author |   Joshua Lock <joshua.g.lock@intel.com> | 2016-08-15 09:43:12 +0100 |
|---|---|---|
| committer | Joshua Lock <joshua.g.lock@intel.com> | 2016-08-19 16:24:32 +0100 |
| commit | c22c65ac4ea0ab842e6807c2876d1c8b85de035f (patch) | |
| tree | c505ef44923b8f2943a7e3e9f32ea050d579e6a3 /meta/recipes-kernel | |
| parent | d7af57b9c8284eaa96fa6c0a560c0047b03fb911 (diff) | |
| download | openembedded-core-contrib-c22c65ac4ea0ab842e6807c2876d1c8b85de035f.tar.gz | |
security_flags: link position independent executables
Link non-shared objects with the -pie option to enable the kernel
to make use of Address Space Layout Randomisation (ASLR) and harden
against Return Oriented Programming (ROP) attacks.
As this linker option isn't compatible with the -fPIC option used
to build shared libraries any recipe which produces shared objects
should have an override setting SHARED_OBJECTS to 1 to disable
the addition of -pie to the linker flags.
Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
Diffstat (limited to 'meta/recipes-kernel')
0 files changed, 0 insertions, 0 deletions