aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAdhemerval Zanella <adhemerval.zanella@linaro.org>2024-03-12 11:15:10 -0300
committerAdhemerval Zanella <adhemerval.zanella@linaro.org>2024-04-08 12:43:48 +0000
commitadcf1578c976ad16c307f88335731524a4e68389 (patch)
treed8701ea8cf732b20485ed8268887d5852f5251e0
parent8ca0171aafa829ccd99b0591feb4e3fb3fb3b8cd (diff)
config/glibc.conf: Improve coverage
The extra options are the ones usually used by distributions. Although all are security oriented, it improves the test coverage. Change-Id: I4a93a3a9280111ff7cf8436990ac00503133ee13
-rw-r--r--config/glibc.conf21
1 files changed, 20 insertions, 1 deletions
diff --git a/config/glibc.conf b/config/glibc.conf
index ff518107..7a266cc0 100644
--- a/config/glibc.conf
+++ b/config/glibc.conf
@@ -1,6 +1,25 @@
# If yes, only static linking will be used
static_link=no
-default_configure_flags="--disable-profile --with-gd=no --with-headers=${sysroots}/libc/usr/include --without-selinux"
+# Disable GNU prof (gmon) support.
+default_configure_flags="--disable-profile"
+
+# Disable libgd support for memusagestat.
+default_configure_flags+=" --with-gd=no"
+
+# Use the installed kernel headers instead of system/toolchain one.
+default_configure_flags+=" --with-headers=${sysroots}/libc/usr/include"
+
+# Disable SELinux, it requires both libaudit and libcap headers.
+default_configure_flags+=" --without-selinux"
+
+# Enable stack protection on most functions that requires a stack frame.
+default_configure_flags+=" --enable-stack-protector=strong"
+
+# Enable -Wl,-z now.
+default_configure_flags+=" --enable-bind-now=yes"
+
+# Enable glibc build itself with -D_FORTIFY_SOURCE=2
+default_configure_flags+=" --enable-fortify-source=2"
default_makeflags="PARALLELMFLAGS=-j${cpus}"