linux-kernel - [PATCH] fix Makefile to ensure proper options get passed from gcc

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <4A97DBD2.903@gentoo.org>
Date:	Fri, 28 Aug 2009 08:29:54 -0500
From:	"Jory A. Pratt" <anarchy@...too.org>
To:	linux-kernel@...r.kernel.org
Subject: [PATCH] fix Makefile to ensure proper options get passed from gcc

if -D__KERNEL__ is not passed via KBUILD_CFLAGS the compiler can have 
options passed by default that will unset
other options such as -ffreestanding or -fno-toplevel-reorder if the 
compiler is passing -fPIE.

refer to fix-fpie-from-being-used.diff

Another option that was suggested from another user was to pass 
-D__KERNEL__ via Kbuild.include, patch is also attached.
either patch would work, There is no risk of breakage, benefit is for 
those who use a hardened toolchain.

fix-cc-options-check.patch

I believe we should pass the option via KBUILD_CFLAGS as to not confuse 
the fact that we are not building CPP code, but rather C code.

Also correct me if I am wrong but last I knew only part of kernel that 
was cpp was qconfig.

-Jory

View attachment "fix-fpie-from-being-used.diff" of type "text/plain" (735 bytes)

View attachment "fix-cc-options-check.patch" of type "text/plain" (844 bytes)