From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 05 Apr 2022 15:15:36 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1nbj21-007IUF-En for lore@lore.pengutronix.de; Tue, 05 Apr 2022 15:15:36 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1nbj1z-0005qv-J5; Tue, 05 Apr 2022 15:15:35 +0200 Received: from drehscheibe.grey.stw.pengutronix.de ([2a0a:edc0:0:c01:1d::a2]) by metis.ext.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nbj1R-0005pD-9g; Tue, 05 Apr 2022 15:15:01 +0200 Received: from [2a0a:edc0:0:1101:1d::39] (helo=dude03.red.stw.pengutronix.de) by drehscheibe.grey.stw.pengutronix.de with esmtp (Exim 4.94.2) (envelope-from ) id 1nbj1S-001EX7-0K; Tue, 05 Apr 2022 15:15:00 +0200 Received: from has by dude03.red.stw.pengutronix.de with local (Exim 4.94.2) (envelope-from ) id 1nbj1P-00DYQl-B7; Tue, 05 Apr 2022 15:14:59 +0200 From: Holger Assmann To: ptxdist@pengutronix.de Date: Tue, 5 Apr 2022 15:14:40 +0200 Message-Id: <20220405131440.3230553-1-h.assmann@pengutronix.de> X-Mailer: git-send-email 2.30.2 MIME-Version: 1.0 Subject: [ptxdist] [PATCH] syslinux: add all hardening flags to blacklist X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Holger Assmann , Marc Kleine-Budde Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false By not blacklisting TARGET_COMPILER_RECORD_SWITCHES parts of the bootloader become too big, with objcopy results then having the wrong size. Since we are handling a bootloader here, we should further disable any hardening option whatsoever. Signed-off-by: Marc Kleine-Budde Signed-off-by: Holger Assmann --- rules/syslinux.make | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/rules/syslinux.make b/rules/syslinux.make index 550fa35a8..0d17470d3 100644 --- a/rules/syslinux.make +++ b/rules/syslinux.make @@ -32,8 +32,7 @@ SYSLINUX_MAKE_ENV := \ ICECC=no SYSLINUX_WRAPPER_BLACKLIST := \ - TARGET_HARDEN_STACKCLASH \ - TARGET_HARDEN_PIE + $(PTXDIST_LOWLEVEL_WRAPPER_BLACKLIST) SYSLINUX_MAKE_OPT := $(CROSS_ENV_PROGS) SYSLINUX_INSTALL_OPT := install INSTALLROOT=$(SYSLINUX_PKGDIR) -- 2.30.2 _______________________________________________ ptxdist mailing list ptxdist@pengutronix.de To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de