From: Stephane Desneux <stephane.desneux@iot.bzh>
Date: Tue, 28 Mar 2017 07:14:45 +0000 (+0000)
Subject: Re-enable security flags proposed in Poky
X-Git-Tag: 3.99.1~103
X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F49%2F8949%2F3;p=AGL%2Fmeta-agl.git

Re-enable security flags proposed in Poky

This security feature was initially enabled by commit a1e6f20
but it has been disabled later by commit 85844f4.

Bug-AGL: SPEC-501

Change-Id: Ic30065a9b3d599adb97bcca78c5863e47fc11920
Signed-off-by: Stephane Desneux <stephane.desneux@iot.bzh>
---

diff --git a/meta-agl-distro/conf/distro/poky-agl.conf b/meta-agl-distro/conf/distro/poky-agl.conf
index 94e4f8000..e919e0a0e 100644
--- a/meta-agl-distro/conf/distro/poky-agl.conf
+++ b/meta-agl-distro/conf/distro/poky-agl.conf
@@ -71,7 +71,7 @@ PREFERRED_PROVIDER_jpeg = "libjpeg-turbo"
 #BB_DANGLINGAPPENDS_WARNONLY = "1"
 
 # enforce security-related compiler flags by default
-#require conf/distro/include/security_flags.inc
+require conf/distro/include/security_flags.inc
 # required overrides, upstreamed but not merged yet:
 # http://lists.openembedded.org/pipermail/openembedded-devel/2016-June/107727.html
 #SECURITY_CFLAGS_pn-llvm3.3 = "${SECURITY_NO_PIE_CFLAGS}"