github/acrn-hypervisor
1
0
Fork 0
mirror of https://github.com/projectacrn/acrn-hypervisor.git synced 2025-06-25 15:02:13 +00:00
Code Issues Projects Releases Wiki Activity

hv: fix symbols not stripped from release binaries

Browse Source 
In release environment, binary files must be stripped in
order to remove debugging code sections and symbol information
that aid attackers in the process of disassembly and reverse
engineering.
Use '-s' linking option to remove symbol table and relocation
information from release binaries.

Tracked-On: #3427
Signed-off-by: Tianhua Sun <tianhuax.s.sun@intel.com>
Reviewed-by: Yonghua Huang <yonghua.huang@intel.com>
This commit is contained in:
Tianhua Sun 2019-07-16 10:32:47 +08:00 committed by wenlingz
parent 5530fc8f36
commit 749556ef12
3 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
devicemodel/Makefile
View File

@ -51,8 +51,11 @@ endif
ifeq ($(RELEASE),0) ifeq ($(RELEASE),0)
CFLAGS += -DDM_DEBUG CFLAGS += -DDM_DEBUG
else
LDFLAGS += -s
endif endif
LDFLAGS += -Wl,-z,noexecstack LDFLAGS += -Wl,-z,noexecstack
LDFLAGS += -Wl,-z,relro,-z,now LDFLAGS += -Wl,-z,relro,-z,now
LDFLAGS += -pie LDFLAGS += -pie

5
hypervisor/Makefile
View File

@ -18,6 +18,7 @@ BASEDIR := $(shell pwd)
HV_OBJDIR ?= $(CURDIR)/build HV_OBJDIR ?= $(CURDIR)/build
HV_FILE := acrn HV_FILE := acrn
SUB_MAKEFILES := $(wildcard */Makefile) SUB_MAKEFILES := $(wildcard */Makefile)
RELEASE ?= 0
LIB_DEBUG = $(HV_OBJDIR)/debug/libdebug.a LIB_DEBUG = $(HV_OBJDIR)/debug/libdebug.a
LIB_RELEASE = $(HV_OBJDIR)/release/librelease.a LIB_RELEASE = $(HV_OBJDIR)/release/librelease.a
@ -95,6 +96,10 @@ else
LDFLAGS += -static LDFLAGS += -static
endif endif
ifeq ($(RELEASE),y)
LDFLAGS += -s
endif
ARCH_CFLAGS += -gdwarf-2 ARCH_CFLAGS += -gdwarf-2
ARCH_ASFLAGS += -gdwarf-2 -DASSEMBLER=1 ARCH_ASFLAGS += -gdwarf-2 -DASSEMBLER=1
ARCH_ARFLAGS += ARCH_ARFLAGS +=

2
tools/acrn-manager/Makefile
View File

@ -41,6 +41,8 @@ endif
ifeq ($(RELEASE),0) ifeq ($(RELEASE),0)
MANAGER_CFLAGS += -g -DMNGR_DEBUG MANAGER_CFLAGS += -g -DMNGR_DEBUG
else
MANAGER_LDFLAGS += -s
endif endif
MANAGER_LDFLAGS := -Wl,-z,noexecstack MANAGER_LDFLAGS := -Wl,-z,noexecstack