aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKhem Raj <raj.khem@gmail.com>2017-05-26 09:15:01 -0700
committerRichard Purdie <richard.purdie@linuxfoundation.org>2017-06-03 23:45:49 +0100
commit08dbaadbb6fadbaa9e0d1542f64864018b6243e5 (patch)
tree5c43fa96f6e65d516a495b466ba896e2090b2a6f
parent8a0af685adb5275dc39ef0cd209d03905d1db067 (diff)
downloadopenembedded-core-08dbaadbb6fadbaa9e0d1542f64864018b6243e5.zip
openembedded-core-08dbaadbb6fadbaa9e0d1542f64864018b6243e5.tar.gz
openembedded-core-08dbaadbb6fadbaa9e0d1542f64864018b6243e5.tar.bz2
glibc: Configure with extra hardening options
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
-rw-r--r--meta/recipes-core/glibc/glibc_2.25.bb4
1 files changed, 4 insertions, 0 deletions
diff --git a/meta/recipes-core/glibc/glibc_2.25.bb b/meta/recipes-core/glibc/glibc_2.25.bb
index ab6fbbe..83a1249 100644
--- a/meta/recipes-core/glibc/glibc_2.25.bb
+++ b/meta/recipes-core/glibc/glibc_2.25.bb
@@ -77,6 +77,10 @@ EXTRA_OECONF = "--enable-kernel=${OLDEST_KERNEL} \
--with-headers=${STAGING_INCDIR} \
--without-selinux \
--enable-obsolete-rpc \
+ --enable-tunables \
+ --enable-bind-now \
+ --enable-stack-protector=strong \
+ --enable-stackguard-randomization \
${GLIBC_EXTRA_OECONF}"
EXTRA_OECONF += "${@get_libc_fpu_setting(bb, d)}"