diff mbox series

[03/28] glibc: Enable CET

Message ID	20220204164748.315559-3-michael.tremer@ipfire.org
State	Accepted
Commit	cf557eca9cc2931b088fd72507780c70a1df088a
Headers	From: Michael Tremer <michael.tremer@ipfire.org> To: development@lists.ipfire.org Subject: [PATCH 03/28] glibc: Enable CET Date: Fri, 4 Feb 2022 16:47:23 +0000 Message-Id: <20220204164748.315559-3-michael.tremer@ipfire.org> In-Reply-To: <20220204164748.315559-1-michael.tremer@ipfire.org> References: <20220204164748.315559-1-michael.tremer@ipfire.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Precedence: list Cc: Michael Tremer <michael.tremer@ipfire.org> Errors-To: development-bounces@lists.ipfire.org Sender: "Development" <development-bounces@lists.ipfire.org>
Series	[01/28] gcc: toolchain stage 2: Set sysroot to /tools_${arch} \| [01/28] gcc: toolchain stage 2: Set sysroot to /tools_${arch} [02/28] glibc: Update to version 2.34 [03/28] glibc: Enable CET [04/28] glibc: Enable memory tagging on aarch64 [05/28] binutils+gcc: Fix that the toolchain compiler is trying to link against host libraries [06/28] make.sh: Build zstd after second pass of GCC [07/28] texinfo: Fix FTBFS with glibc-2.34 [08/28] ntp: Fix FTBFS with glibc 2.34 [09/28] postfix: Fix FTBFS with glibc 2.34 [10/28] libnfsidmap: Drop package [11/28] binutils: Update to 2.37 [12/28] make.sh: Make BUILDTARGET consistent for all architectures [13/28] make.sh: Bump toolchain version [14/28] flash-images: Increase size of root partition to 1800 MB [15/28] binutils/gcc: Explicitely declare host and build architecture tuple [16/28] hyperscan: Enable release build and disable examples [17/28] pciutils: Do not make headers executable [18/28] make.sh: Refactor stripper [19/28] make.sh: Include /tools/sbin in search path [20/28] expect: Update automake to fix build on aarch64 [21/28] make.sh: Bump toolchain date [22/28] stripper: Actually use the path we want [23/28] make.sh: Add CUSTOM_PATH option to lfsmake1 [24/28] make.sh: Set correct PATH in stage1 [25/28] Config: Globally permit using 32 bit time_t [26/28] strip: Dereference path if it is a symlink [27/28] glibc: Update to 2.35 [28/28] make.sh: Bump toolchain version

Commit Message

Michael Tremer Feb. 4, 2022, 4:47 p.m. UTC

  Enable Intel Control-flow Enforcement Technology (CET) support
to protect the library with indirect branch tracking (IBT) and
shadow stack (SHSTK).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 lfs/glibc | 4 ++++
 1 file changed, 4 insertions(+)

diff mbox series

Patch

diff --git a/lfs/glibc b/lfs/glibc
index e7f2a71c5..9c631de4c 100644
--- a/lfs/glibc
+++ b/lfs/glibc
@@ -65,6 +65,10 @@  EXTRA_CONFIG += \
 	--enable-bind-now \
 	--disable-crypt
 
+ifeq "$(BUILD_ARCH)" "x86_64"
+	EXTRA_CONFIG += --enable-cet
+endif
+
 ###############################################################################
 # Top-level Rules
 ###############################################################################