From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: development@lists.ipfire.org Subject: [PATCH 03/28] glibc: Enable CET Date: Fri, 04 Feb 2022 16:47:23 +0000 Message-ID: <20220204164748.315559-3-michael.tremer@ipfire.org> In-Reply-To: <20220204164748.315559-1-michael.tremer@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4120500361277020057==" List-Id: --===============4120500361277020057== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Enable Intel Control-flow Enforcement Technology (CET) support to protect the library with indirect branch tracking (IBT) and shadow stack (SHSTK). Signed-off-by: Michael Tremer --- lfs/glibc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lfs/glibc b/lfs/glibc index e7f2a71c5..9c631de4c 100644 --- a/lfs/glibc +++ b/lfs/glibc @@ -65,6 +65,10 @@ EXTRA_CONFIG +=3D \ --enable-bind-now \ --disable-crypt =20 +ifeq "$(BUILD_ARCH)" "x86_64" + EXTRA_CONFIG +=3D --enable-cet +endif + ############################################################################= ### # Top-level Rules ############################################################################= ### --=20 2.30.2 --===============4120500361277020057==--