openssl-native: disable execstack flag to prevent problems with SELinux
The execstack flag gets set on libcrypto.so by default which causes SELinux to prevent it from being loaded on systems using SELinux, which includes Fedora. This patch disables the execstack flag. (Note: Red Hat do this in their openssl packaging.) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
This commit is contained in:
parent
0f716e64c4
commit
089612794d
|
@ -15,7 +15,11 @@ S = "${WORKDIR}/openssl-${PV}"
|
|||
|
||||
AR_append = " r"
|
||||
CFLAG = "${@base_conditional('SITEINFO_ENDIANESS', 'le', '-DL_ENDIAN', '-DB_ENDIAN', d)} \
|
||||
-DTERMIO ${FULL_OPTIMIZATION} -Wall"
|
||||
-DTERMIO ${FULL_OPTIMIZATION}"
|
||||
|
||||
# Avoid binaries being marked as requiring an executable stack (which causes
|
||||
# issues with SELinux on the host)
|
||||
CFLAG_append_virtclass-native = " -Wa,--noexecstack"
|
||||
|
||||
# -02 does not work on mipsel: ssh hangs when it tries to read /dev/urandom
|
||||
CFLAG_mtx-1 := "${@'${CFLAG}'.replace('-O2', '')}"
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
require openssl.inc
|
||||
|
||||
PR = "r0"
|
||||
PR = "r1"
|
||||
SRC_URI += "file://debian/ca.patch \
|
||||
file://debian/config-hurd.patch;apply=no \
|
||||
file://debian/debian-targets.patch \
|
||||
|
|
Loading…
Reference in New Issue