mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-21 22:41:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

coreos-kernel: explicitly add -nopie for hardened compilers

Browse Source 
The Gentoo hardened compiler enables PIE by default unless it detects an
incompatible option. To detect kernel builds it uses -D__KERNEL__ which
is unfortunately a preprocessor option that ccache >= 3.2 will not pass
to compile-only calls, since in theory it is unnessicary and omitting
preprocessor options works around and issues in another (*cough* LLVM)
compilers. There really isn't any other alternative magic hack so go
with the plain no-magic solution. :)

Bug: https://bugs.gentoo.org/show_bug.cgi?id=535984
This commit is contained in:
Michael Marineau 2015-07-07 20:25:12 -07:00
parent edfd5ad012
commit 7fed71e9ac
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
sdk_container/src/third_party/coreos-overlay/eclass/coreos-kernel.eclass vendored
View File

@ -92,8 +92,12 @@ update_bootengine_cpio() {
} }
kmake() { kmake() {
local kernel_arch=$(tc-arch-kernel) local kernel_arch=$(tc-arch-kernel) kernel_cflags=
emake LDFLAGS="" ARCH="${kernel_arch}" CROSS_COMPILE="${CHOST}-" "$@" if gcc-specs-pie; then
kernel_cflags="-nopie"
fi
emake ARCH="${kernel_arch}" CROSS_COMPILE="${CHOST}-" \
KCFLAGS="${kernel_cflags}" LDFLAGS="" "$@"
} }
# Discard the module signing key, we use new keys for each build. # Discard the module signing key, we use new keys for each build.