From patchwork Wed Dec 29 17:40:37 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Hauke Mehrtens X-Patchwork-Id: 1573998 X-Patchwork-Delegate: hauke@hauke-m.de Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: bilbo.ozlabs.org; dkim=pass (2048-bit key; secure) header.d=lists.infradead.org header.i=@lists.infradead.org header.a=rsa-sha256 header.s=bombadil.20210309 header.b=PGQ8J1vH; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=hauke-m.de header.i=@hauke-m.de header.a=rsa-sha256 header.s=MBO0001 header.b=wriCgmzH; dkim-atps=neutral Authentication-Results: ozlabs.org; spf=none (no SPF record) smtp.mailfrom=lists.openwrt.org (client-ip=2607:7c80:54:e::133; helo=bombadil.infradead.org; envelope-from=openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org; receiver=) Received: from bombadil.infradead.org (bombadil.infradead.org [IPv6:2607:7c80:54:e::133]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by bilbo.ozlabs.org (Postfix) with ESMTPS id 4JPJhG6FcNz9sRN for ; Thu, 30 Dec 2021 04:45:02 +1100 (AEDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:MIME-Version:References:In-Reply-To: Message-Id:Date:Subject:Cc:To:From:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=+vEQUD/6pnDr6Oh1K7hgBppp6bBIs8TM+jnnSRh4CE8=; b=PGQ8J1vHIectzM 0JE7MfGEDry7Ipak82no9QtwilEQAH8z6VenDze6BbveUF0cr6TxA2DQWqN0A8Lc52CBlDKslQfoj K5FmLzYv7BTshDXHnGGEbkcPmRQOBZIGi43ZeCF4ckAmPucZwwqYwHgDVQbhClTKu3+V/DyBQk5jV JcaK66MDRlMWrW5e7rDjoz/RweJwCZ/Yud4/VzjwqLmMXAXVgI33Mx9Zk2/0pNOuzZAq6ub7MZ16P iEho6CIdf3rTpYFflMMAphQ7MBrjen5CIKUewYHLv4nqSsn2TPTtxp5Snw8kz5czyY4fxM9yf4U17 Vzu++HK+MH2dRLIBin+g==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.94.2 #2 (Red Hat Linux)) id 1n2cxi-003DzU-MD; Wed, 29 Dec 2021 17:42:06 +0000 Received: from mout-p-201.mailbox.org ([2001:67c:2050::465:201]) by bombadil.infradead.org with esmtps (Exim 4.94.2 #2 (Red Hat Linux)) id 1n2cwu-003Dmr-Lw for openwrt-devel@lists.openwrt.org; Wed, 29 Dec 2021 17:41:18 +0000 Received: from smtp1.mailbox.org (smtp1.mailbox.org [IPv6:2001:67c:2050:105:465:1:1:0]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-p-201.mailbox.org (Postfix) with ESMTPS id 4JPJbj3qRnzQkF4; Wed, 29 Dec 2021 18:41:05 +0100 (CET) X-Virus-Scanned: amavisd-new at heinlein-support.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hauke-m.de; s=MBO0001; t=1640799663; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=8DIU4aDZVVtyAZvNEX3r+DHBrrghlKcxwv8MkHXYm3g=; b=wriCgmzHOkaY+DPSqxIXeCbd2VK6XizJDnbkM1G3fPmjGq0aRGdns+vk1/NcIBLgKDbs5C Aip+LxuK0shW47A5FzUpM0CnjRQBXoBjkAPk8fJCmU+kVeTW4id2B64z20iEeAQS+DEhW4 syqWQF6huRF91wHpx7M6ycd9HRbRW73s/T1FYpX+M3CA9krHeVPrAnuWkClNNuCxIXV8QO 44VyvLhAIEb99R4Fgwt8dolHXDhN8kBTYAi+E1tge6s/9lstm2BJVZqrzOWzkKZ42rAbla XB+HNlfh4j8+BgI8KhuP2bzfGgrZMzBtrcSCiAwDi5AtjHpCog3Jllobo1/jzw== From: Hauke Mehrtens To: openwrt-devel@lists.openwrt.org Cc: dedeckeh@gmail.com, Hauke Mehrtens Subject: [PATCH 3/3] toolchain: glibc: Enable --enable-bind-now Date: Wed, 29 Dec 2021 18:40:37 +0100 Message-Id: <20211229174037.1244686-3-hauke@hauke-m.de> In-Reply-To: <20211229174037.1244686-1-hauke@hauke-m.de> References: <20211229174037.1244686-1-hauke@hauke-m.de> MIME-Version: 1.0 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20211229_094116_900090_BDF1A829 X-CRM114-Status: UNSURE ( 6.56 ) X-CRM114-Notice: Please train this message. X-Spam-Score: -0.9 (/) X-Spam-Report: Spam detection software, running on the system "bombadil.infradead.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Enable --enable-bind-now when CONFIG_PKG_RELRO_FULL is set. This option is activated by default. This will enable full RELRO protection. Signed-off-by: Hauke Mehrtens --- toolchain/glibc/common.mk | 1 + 1 file changed, 1 insertion(+) Content analysis details: (-0.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low trust [2001:67c:2050:0:0:0:465:201 listed in] [list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain X-BeenThere: openwrt-devel@lists.openwrt.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: OpenWrt Development List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "openwrt-devel" Errors-To: openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org Enable --enable-bind-now when CONFIG_PKG_RELRO_FULL is set. This option is activated by default. This will enable full RELRO protection. Signed-off-by: Hauke Mehrtens --- toolchain/glibc/common.mk | 1 + 1 file changed, 1 insertion(+) diff --git a/toolchain/glibc/common.mk b/toolchain/glibc/common.mk index 16d9241dcae5..c239863a6c0a 100644 --- a/toolchain/glibc/common.mk +++ b/toolchain/glibc/common.mk @@ -63,6 +63,7 @@ GLIBC_CONFIGURE:= \ --$(if $(CONFIG_SOFT_FLOAT),without,with)-fp \ $(if $(CONFIG_PKG_CC_STACKPROTECTOR_REGULAR),--enable-stack-protector=yes) \ $(if $(CONFIG_PKG_CC_STACKPROTECTOR_STRONG),--enable-stack-protector=strong) \ + $(if $(CONFIG_PKG_RELRO_FULL),--enable-bind-now) \ --enable-kernel=5.4.0 export libc_cv_ssp=no