On 07/07/2016 05:53 PM, Burton, Ross wrote:
On 7 July 2016 at 08:54, Andre McCurdy <armccu...@gmail.com <mailto:armccu...@gmail.com>> wrote: Based on the e2fsprogs release notes, v1.43.1 adds a new configure option, --enable-hardening http://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.43.1 It might be nice to either enable that by default, or provide a PACKAGECONFIG to control it (and in either case, verify that it doesn't conflict with security_flags.inc). I'd lean toward enabling by default and then nullifying security_flags, assuming that the latter is effectively the same as the former, considering that the flags are supported upstream.
Hi Ross, I updated it in the repo, enable it by default for target, it can't build with native: | checking for uuid_generate in -luuid... no | configure: error: external uuid library not found And "require conf/distro/include/security_flags.inc" doesn't affect the build result. git://git.openembedded.org/openembedded-core-contrib rbt/pu http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=rbt/pu Robert Yang (7): debianutils: 4.7 -> 4.8 e2fsprogs: 1.43 -> 1.43.1 git: 2.8.4 -> 2.9.0 gmp: 6.1.0 -> 6.1.1 libpcre: 8.38 -> 8.39 wget: 1.17.1 -> 1.18 file: 5.27 -> 5.28 // Robert
Ross
-- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core