diff options
| author | Andrey Churbanov <Andrey.Churbanov@intel.com> | 2015-02-20 17:55:48 +0000 |
|---|---|---|
| committer | Andrey Churbanov <Andrey.Churbanov@intel.com> | 2015-02-20 17:55:48 +0000 |
| commit | 19b619330a24dfe370bf8f8b9dec7f63e63cfc80 (patch) | |
| tree | 2ff543f1a3285f4bee70cbfb752d6d8aadc31cea /runtime/tools | |
| parent | 0fb8c1581fdafe9ed4502d95203e45129a5b12e8 (diff) | |
Added some compiler flags for security on Linux and Mac link stages.
git-svn-id: https://llvm.org/svn/llvm-project/openmp/trunk@230027 91177308-0d34-0410-b5e6-96231b3b80d8
Diffstat (limited to 'runtime/tools')
| -rw-r--r-- | runtime/tools/src/common-tools.mk | 35 |
1 files changed, 30 insertions, 5 deletions
diff --git a/runtime/tools/src/common-tools.mk b/runtime/tools/src/common-tools.mk index 5c9dcb7..d291dca 100644 --- a/runtime/tools/src/common-tools.mk +++ b/runtime/tools/src/common-tools.mk @@ -85,11 +85,9 @@ ifneq "$(filter lin mac,$(os))" "" ifneq "$(CPLUSPLUS)" "on" c-flags += -std=gnu99 endif - # Generate position-independent code (a must for shared objects). - ifeq "$(LINK_TYPE)" "dyna" - c-flags += -fPIC - cxx-flags += -fPIC - endif + # Generate position-independent code (SDL requirements). + c-flags += -fPIC + cxx-flags += -fPIC # Emit debugging information. ifeq "$(DEBUG_INFO)" "on" c-flags += -g @@ -199,16 +197,28 @@ ifneq "$(arch)" "mic" ld-flags += -m elf_x86_64 endif ld-flags += -x -lc -ldl + # SDL (Security Development Lifecycle) flags: + # -z noexecstack - Stack execution protection. + # -z relro -z now - Data relocation and protection. + ld-flags += -z relro -z now ld-flags += -z noexecstack ld-flags-dll += -soname=$(@F) endif ifeq "$(ld)" "$(c)" ld-out = $(c-out) + # SDL (Security Development Lifecycle) flags: + # -z noexecstack - Stack execution protection. + # -z relro -z now - Data relocation and protection. + ld-flags += -Wl,-z,relro -Wl,-z,now ld-flags += -Wl,-z,noexecstack ld-flags-dll += -Wl,-soname=$(@F) endif ifeq "$(ld)" "$(cxx)" ld-out = $(cxx-out) + # SDL (Security Development Lifecycle) flags: + # -z noexecstack - Stack execution protection. + # -z relro -z now - Data relocation and protection. + ld-flags += -Wl,-z,relro -Wl,-z,now ld-flags += -Wl,-z,noexecstack ld-flags-dll += -Wl,-soname=$(@F) endif @@ -239,6 +249,11 @@ ifeq "$(arch)" "mic" ld-out = -o$(space) ld-flags += -m elf_l1om_fbsd ld-flags-dll += -shared -x -lc + # SDL (Security Development Lifecycle) flags: + # -z noexecstack - Stack execution protection. + # -z relro -z now - Data relocation and protection. + ld-flags += -z noexecstack + ld-flags += -z relro -z now ld-flags-dll += -soname=$(@F) # Now find out path to libraries. ld-flags-L := $(shell $(c) -Wl,-v -\# 2>&1 | grep -e "-L") @@ -254,10 +269,20 @@ ifeq "$(arch)" "mic" ifeq "$(ld)" "$(c)" ld-out = $(c-out) ld-flags-dll += -shared -Wl,-x -Wl,-soname=$(@F) + # SDL (Security Development Lifecycle) flags: + # -z noexecstack - Stack execution protection. + # -z relro -z now - Data relocation and protection. + ld-flags += -Wl,-z,noexecstack + ld-flags += -Wl,-z,relro -Wl,-z,now endif ifeq "$(ld)" "$(cxx)" ld-out = $(cxx-out) ld-flags-dll += -shared -Wl,-x -Wl,-soname=$(@F) + # SDL (Security Development Lifecycle) flags: + # -z noexecstack - Stack execution protection. + # -z relro -z now - Data relocation and protection. + ld-flags += -Wl,-z,noexecstack + ld-flags += -Wl,-z,relro -Wl,-z,now endif endif |