From 9c32b62d6494139daf4bab3279779c392fead116 Mon Sep 17 00:00:00 2001 From: Enrico Scholz Date: Thu, 12 Jan 2012 17:30:21 +0100 Subject: openssl: build always with -Wa,--noexecstack There is no reason to disable exec-stack only for -native builds; binaries on the target will suffer from the same SELinux ACLs. OpenSSL does not use executable stack so this option can be disabled unconditionally. Signed-off-by: Enrico Scholz Signed-off-by: Richard Purdie --- meta/recipes-connectivity/openssl/openssl.inc | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) (limited to 'meta/recipes-connectivity/openssl') diff --git a/meta/recipes-connectivity/openssl/openssl.inc b/meta/recipes-connectivity/openssl/openssl.inc index af1922e1f6..f5b24324ba 100644 --- a/meta/recipes-connectivity/openssl/openssl.inc +++ b/meta/recipes-connectivity/openssl/openssl.inc @@ -18,12 +18,10 @@ SRC_URI = "http://www.openssl.org/source/openssl-${PV}.tar.gz \ S = "${WORKDIR}/openssl-${PV}" AR_append = " r" +# Avoid binaries being marked as requiring an executable stack since it +# doesn't(which causes and this causes issues with SELinux CFLAG = "${@base_conditional('SITEINFO_ENDIANNESS', 'le', '-DL_ENDIAN', '-DB_ENDIAN', d)} \ - -DTERMIO ${CFLAGS} -Wall" - -# Avoid binaries being marked as requiring an executable stack (which causes -# issues with SELinux on the host) -CFLAG_append_class-native = " -Wa,--noexecstack" + -DTERMIO ${CFLAGS} -Wall -Wa,--noexecstack" # -02 does not work on mipsel: ssh hangs when it tries to read /dev/urandom CFLAG_mtx-1 := "${@'${CFLAG}'.replace('-O2', '')}" -- cgit 1.2.3-korg