Run experience with security flags enabled

From: "Andreas Müller" <schnitzeltony@gmail.com>
To: Patches and discussions about the oe-core layer
	<openembedded-core@lists.openembedded.org>
Subject: Run experience with security flags enabled
Date: Wed, 26 Sep 2018 23:25:01 +0200	[thread overview]
Message-ID: <CALbNGRSPiWuTyLqaWbiH3UDF-maBQusnrbPCH_eWCxzm7n5rPA@mail.gmail.com> (raw)

Hi,

from oe-core perspective my images are build on sumo (glibc 2.27). To
see what to expect, I enabled security flags (and yes some recipes in
my layers needed rework).

Now that I have an image, I thought: let's give it a run. Apart of
other issues (maybe later) I get on every startup an error message for
ldconfig.
systemctl ldconfig says:

● ldconfig.service - Rebuild Dynamic Linker Cache
   Loaded: loaded (/lib/systemd/system/ldconfig.service; static;
vendor preset: enabled)
   Active: failed (Result: core-dump) since Mon 2018-09-24 19:05:04
UTC; 2 days ago
     Docs: man:ldconfig(8)
  Process: 136 ExecStart=/sbin/ldconfig -X (code=dumped, signal=SEGV)
 Main PID: 136 (code=dumped, signal=SEGV)

Sep 24 19:05:04 raspberrypi3 systemd[1]: Starting Rebuild Dynamic
Linker Cache...
Sep 24 19:05:04 raspberrypi3 systemd[1]: ldconfig.service: Main
process exited, code=dumped, status=11/SEGV
Sep 24 19:05:04 raspberrypi3 systemd[1]: ldconfig.service: Failed with
result 'core-dump'.
Sep 24 19:05:04 raspberrypi3 systemd[1]: Failed to start Rebuild
Dynamic Linker Cache.

Again somebody else seeing similar / remembers a fix?

Help appreciated

Andreas