hv: fix symbols not stripped from release binaries

In release environment, binary files must be stripped in
order to remove debugging code sections and symbol information
that aid attackers in the process of disassembly and reverse
engineering.
Use '-s' linking option to remove symbol table and relocation
information from release binaries.

Tracked-On: #3427
Signed-off-by: Tianhua Sun <tianhuax.s.sun@intel.com>
Reviewed-by: Yonghua Huang <yonghua.huang@intel.com>
This commit is contained in:
Tianhua Sun
2019-07-16 10:32:47 +08:00
committed by wenlingz
parent 5530fc8f36
commit 749556ef12
3 changed files with 10 additions and 0 deletions

View File

@@ -41,6 +41,8 @@ endif
ifeq ($(RELEASE),0)
MANAGER_CFLAGS += -g -DMNGR_DEBUG
else
MANAGER_LDFLAGS += -s
endif
MANAGER_LDFLAGS := -Wl,-z,noexecstack