Re: Include PaX / GRSecurity

Re: Include PaX / GRSecurity

[Stath, Paul]

Jens Lecius <incnews@jenslucius.de> write:

> I am trying to include the GRSecurity & PaX patches for the kernel in a Yocto build.
>
> The patch is applied to the kernel correctly, but when the build begins
> I get the following error:

> | Makefile:686: *** Your gcc installation does not support plugins. If
> the necessary headers for plugin support are missing, they should be
> installed.  On Debian, apt-get install gcc-<ver>-plugin-dev.  If you
> choose to ignore this error and lessen the improvements provided by this
> patch, re-run make with the DISABLE_PAX_PLUGINS=y argument..  Stop.

> Any ideas how to solve this? (Compile is on an Intel machine crosscompile for ARM)

> Thanks,
> Jens

By default, the gcc compiler built by Yocto is not configured with plug-in support.

To resolve this, I added a bbappend file for the gcc-cross recipe in my custom layer, which simply contained:

EXTRA_OECONF += "--enable-plugin"

This added the "--enable-plugin" flag to the do_configure task when configuring/building the gcc-cross compiler.

Note:  Where you add the "--enable-plugin" configure option will depend on which compiler needs plugin support.

Include PaX / GRSecurity

[Jens Lucius]

I am trying to include the GRSecurity & PaX patches for the kernel in a 
Yocto build.

The patch is applied to the kernel correctly, but when the build begins 
I get the following error:

| Makefile:686: *** Your gcc installation does not support plugins. If 
the necessary headers for plugin support are missing, they should be 
installed.  On Debian, apt-get install gcc-<ver>-plugin-dev.  If you 
choose to ignore this error and lessen the improvements provided by this 
patch, re-run make with the DISABLE_PAX_PLUGINS=y argument..  Stop.

Any ideas how to solve this? (Compile is on an Intel machine 
crosscompile for ARM)

Thanks,

Jens