From patchwork Thu Jan 12 16:30:21 2012 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: openssl: build always with -Wa,--noexecstack Date: Thu, 12 Jan 2012 16:30:21 -0000 From: Enrico Scholz X-Patchwork-Id: 19181 Message-Id: <1326385824-32201-2-git-send-email-enrico.scholz@sigma-chemnitz.de> To: openembedded-core@lists.openembedded.org Cc: Enrico Scholz There is no reason to disable exec-stack only for -native builds; binaries on the target will suffer from the same SELinux ACLs. OpenSSL does not use executable stack so this option can be disabled unconditionally. Signed-off-by: Enrico Scholz --- meta/recipes-connectivity/openssl/openssl.inc | 6 +----- 1 files changed, 1 insertions(+), 5 deletions(-) diff --git a/meta/recipes-connectivity/openssl/openssl.inc b/meta/recipes-connectivity/openssl/openssl.inc index 771f146..65bb671 100644 --- a/meta/recipes-connectivity/openssl/openssl.inc +++ b/meta/recipes-connectivity/openssl/openssl.inc @@ -19,11 +19,7 @@ S = "${WORKDIR}/openssl-${PV}" AR_append = " r" CFLAG = "${@base_conditional('SITEINFO_ENDIANNESS', 'le', '-DL_ENDIAN', '-DB_ENDIAN', d)} \ - -DTERMIO ${FULL_OPTIMIZATION} -Wall" - -# Avoid binaries being marked as requiring an executable stack (which causes -# issues with SELinux on the host) -CFLAG_append_virtclass-native = " -Wa,--noexecstack" + -DTERMIO ${FULL_OPTIMIZATION} -Wall -Wa,--noexecstack" # -02 does not work on mipsel: ssh hangs when it tries to read /dev/urandom CFLAG_mtx-1 := "${@'${CFLAG}'.replace('-O2', '')}"