[meta-intel] [met-intel-quark] Enable stack-protector defense support for SPI image

Brendan Le Foll brendan.le.foll at intel.com
Fri Jul 10 07:08:14 PDT 2015


On Thu, Jul 09, 2015 at 08:35:43AM +0100, Ramajayam, Yugeraj wrote:
> Hi Brian, 
> 
> I followed as you said. I ran, 
> 
> 1. $ bitbake -c menuconfig uclibc
> 2. Selected fstack-protector option 
> 3. Copied the .config file from build/tmp-spi/work/i586-poky-linux-uclibc/uclibc/0.9.33+gitAUTOINC+48a0006012-r9/git/.config
> 4. I replaced ../meta/recipes-core/uclibc/uclibc-git/uClibc.distro with .config and renamed it as uClibc.distro and did a $ bitbake uclibc
> 5. After compilation, I checked the build/tmp-spi/work/i586-poky-linux-uclibc/uclibc/0.9.33+gitAUTOINC+48a0006012-r9. The Uclibc.distro there is the same as I changed in ../meta/recipes-core/uclibc/uclibc-git/uClibc.distro with all the SSP (stack-protector) related configs built in.
> 6. But, when I checked .config file at  build/tmp-spi/work/i586-poky-linux-uclibc/uclibc/0.9.33+gitAUTOINC+48a0006012-r9/git/.config, the SSP configs are disabled as in my previous build. Somehow the stack-protector features were not passed over to the final .config
> 
> Is there any other way for me to check if those stack-protector options are enabled ?
> Or did I missing some steps ??

Are you sure you don't have another recipe overriding that config? I
gave it a quick go changing LDSO_BASE_FILENAME and I can see that
change propagated in the build tree. I'm using meta-intel-quark on
dizzy. What metadata are you using?

Cheers,
Brendan


More information about the meta-intel mailing list