Go to file
Matt Weber 7484c1c3b8 toolchain/toolchain-wrapper: add BR2_RELRO_
The RELRO/PIE flags are currently passed via CFLAGS/LDFLAGS and this patch
proposes moving them to the toolchain wrapper.

 (1) The flags should _always_ be passed, without leaving the possibility
     for any package to ignore them. I.e, when BR2_RELRO_FULL=y is used
     in a build, all executables should be built PIE. Passing those
     options through the wrapper ensures they are used during the build
     of all packages.

 (2) Some options are incompatible with -fPIE. For example, when
     building object files for a shared libraries, -fPIC is used, and
     -fPIE shouldn't be used in combination with -fPIE. Similarly, -r
     or -static are directly incompatible as they are different link
     time behaviors then the intent of PIE. Passing those options
     through the wrapper allows to add some "smart" logic to only pass
     -fPIE/-pie when relevant.

 (3) Some toolchain, kernel and bootloader packages may want to
     explicitly disable PIE in a build where the rest of the userspace
     has intentionally enabled it. The wrapper provides an option
     to key on the -fno-pie/-no-pie and bypass the appending of RELRO
     flags.
     The current Kernel and U-boot source trees include this option.
     8438ee76b0
     6ace36e19a
     If using PIE with a older Kernel and/or U-boot version, a backport of these
     changes  might be required. However this patchset also uses the
     __KERNEL__ and __UBOOT__ defines as a way to disable PIE.

NOTE: The current implementation via CFLAGS/LDFLAGS has caused some
build time failures as the conditional logic doesn't yet exist in
Buildroot:

https://bugs.busybox.net/show_bug.cgi?id=11206
https://bugs.busybox.net/show_bug.cgi?id=11321

Good summary of the most common build failures related to
enabling pie: https://wiki.ubuntu.com/SecurityTeam/PIE

[Peter: minor cleanups]
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-10-20 12:50:29 +02:00
arch arch: drop BR2_GCC_TARGET_CPU_REVISION option 2018-10-01 14:52:32 +02:00
board configs/bananapi_m2_ultra: new defconfig 2018-10-14 10:10:36 +02:00
boot boot/uboot: fix environment image generation on big endian systems 2018-10-14 21:11:58 +02:00
configs configs/raspberrypi*: bump kernel version to 6d27aa156c 2018-10-15 13:15:19 +02:00
docs docs/website: add TkOS to the sponsors 2018-10-17 21:27:14 +02:00
fs
linux {linux, linux-headers}: fix linux-4.9.133.tar.xz checksum 2018-10-17 21:45:41 +02:00
package toolchain/toolchain-wrapper: add BR2_RELRO_ 2018-10-20 12:50:29 +02:00
support support/testing: fix TestATFMarvell test case 2018-10-14 19:38:32 +02:00
system
toolchain toolchain/toolchain-wrapper: add BR2_RELRO_ 2018-10-20 12:50:29 +02:00
utils utils/get-developers: fix python 3.x compatibility 2018-10-12 09:05:50 +02:00
.defconfig arch: remove support for sh64 2016-09-08 22:15:15 +02:00
.flake8
.gitignore
.gitlab-ci.yml configs/bananapi_m2_ultra: new defconfig 2018-10-14 10:10:36 +02:00
.gitlab-ci.yml.in
CHANGES Update for 2018.08.1 2018-10-07 11:44:17 +02:00
Config.in
Config.in.legacy package/linux-headers: really drop the 4.17 choice 2018-10-07 21:45:16 +02:00
COPYING
DEVELOPERS python-py: new package 2018-10-15 14:36:45 +02:00
Makefile arch: add support for RISC-V 64-bit (riscv64) architecture 2018-09-23 23:42:41 +02:00
Makefile.legacy
README

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on Freenode IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches