diff options
| author |  Matt Weber <matthew.weber@rockwellcollins.com> | 2020-09-23 10:29:08 -0500 |
|---|---|---|
| committer |  Peter Korsgaard <peter@korsgaard.com> | 2020-09-29 21:09:16 +0200 |
| commit | 6d4dcb655eea4965412adffdd80565b8e7ba09a1 (patch) | |
| tree | fe97253ce9e859fd915ab84f5750dd78eb8c2a64 | |
| parent | d5348fca8418872c7b8b3a631c93f5ac2f899b0d (diff) | |
| download | buildroot-6d4dcb655eea4965412adffdd80565b8e7ba09a1.tar.gz buildroot-6d4dcb655eea4965412adffdd80565b8e7ba09a1.tar.bz2 | |
package/gcc: transition PowerPC 32 to secureplt
PowerPC has two PLT models: BSS-PLT and Secure-PLT. BSS-PLT uses
runtime code generation to generate the PLT stubs. Secure-PLT was
introduced with GCC 4.1 and Binutils 2.17 (base has GCC 4.2.1 and
Binutils 2.17), and is a more secure PLT format, using a read-only
linkage table, with the dynamic linker populating a non-executable
index table.
References to other distro/BSD transitions:
https://patchwork.openembedded.org/patch/106621/
https://reviews.freebsd.org/D20598
Fixes a bug observed when creating SELinux policy where all apps
require execmem because the heap requires execute before this change.
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f9b539bf4054d55da69280b19f4b99a91cbe6e0b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| -rw-r--r-- | package/gcc/gcc.mk | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/package/gcc/gcc.mk b/package/gcc/gcc.mk index b834269adc..df5bf22b96 100644 --- a/package/gcc/gcc.mk +++ b/package/gcc/gcc.mk @@ -223,6 +223,13 @@ HOST_GCC_COMMON_CONF_OPTS += \ --with-long-double-128 endif +# Set default to Secure-PLT to prevent run-time +# generation of PLT stubs (supports RELRO and +# SELinux non-exemem capabilities) +ifeq ($(BR2_powerpc),y) +HOST_GCC_COMMON_CONF_OPTS += --enable-secureplt +endif + # PowerPC64 big endian by default uses the elfv1 ABI, and PowerPC 64 # little endian by default uses the elfv2 ABI. However, musl has # decided to use the elfv2 ABI for both, so we force the elfv2 ABI for |