mirror of
https://github.com/projectacrn/acrn-hypervisor.git
synced 2025-08-15 23:05:15 +00:00
749556ef12
In release environment, binary files must be stripped in order to remove debugging code sections and symbol information that aid attackers in the process of disassembly and reverse engineering. Use '-s' linking option to remove symbol table and relocation information from release binaries. Tracked-On: #3427 Signed-off-by: Tianhua Sun <tianhuax.s.sun@intel.com> Reviewed-by: Yonghua Huang <yonghua.huang@intel.com>
106 lines
3.1 KiB
Makefile
106 lines
3.1 KiB
Makefile
T := $(CURDIR)
|
|
OUT_DIR ?= $(shell mkdir -p $(T)/build;cd $(T)/build;pwd)
|
|
CC ?= gcc
|
|
RELEASE ?= 0
|
|
|
|
MANAGER_CFLAGS := -g -O0 -std=gnu11
|
|
MANAGER_CFLAGS += -D_GNU_SOURCE
|
|
MANAGER_CFLAGS += -DNO_OPENSSL
|
|
MANAGER_CFLAGS += -m64
|
|
MANAGER_CFLAGS += -Wall -ffunction-sections
|
|
MANAGER_CFLAGS += -Werror
|
|
MANAGER_CFLAGS += -O2 -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2
|
|
MANAGER_CFLAGS += -Wformat -Wformat-security -fno-strict-aliasing
|
|
MANAGER_CFLAGS += -fpie -fpic
|
|
#FIXME: remove me. work-around for system() calls, which will be removed
|
|
MANAGER_CFLAGS += -Wno-format-truncation -Wno-unused-result
|
|
MANAGER_CFLAGS += -Wno-stringop-truncation
|
|
MANAGER_CFLAGS += $(CFLAGS)
|
|
|
|
MANAGER_CFLAGS += -I../../devicemodel/include
|
|
MANAGER_CFLAGS += -I../../devicemodel/include/public
|
|
MANAGER_CFLAGS += -I../../hypervisor/include
|
|
|
|
GCC_MAJOR=$(shell echo __GNUC__ | $(CC) -E -x c - | tail -n 1)
|
|
GCC_MINOR=$(shell echo __GNUC_MINOR__ | $(CC) -E -x c - | tail -n 1)
|
|
|
|
#enable stack overflow check
|
|
STACK_PROTECTOR := 1
|
|
|
|
ifdef STACK_PROTECTOR
|
|
ifeq (true, $(shell [ $(GCC_MAJOR) -gt 4 ] && echo true))
|
|
MANAGER_CFLAGS += -fstack-protector-strong
|
|
else
|
|
ifeq (true, $(shell [ $(GCC_MAJOR) -eq 4 ] && [ $(GCC_MINOR) -ge 9 ] && echo true))
|
|
MANAGER_CFLAGS += -fstack-protector-strong
|
|
else
|
|
MANAGER_CFLAGS += -fstack-protector
|
|
endif
|
|
endif
|
|
endif
|
|
|
|
ifeq ($(RELEASE),0)
|
|
MANAGER_CFLAGS += -g -DMNGR_DEBUG
|
|
else
|
|
MANAGER_LDFLAGS += -s
|
|
endif
|
|
|
|
MANAGER_LDFLAGS := -Wl,-z,noexecstack
|
|
MANAGER_LDFLAGS += -Wl,-z,relro,-z,now
|
|
MANAGER_LDFLAGS += -pie
|
|
MANAGER_LDFLAGS += -L$(OUT_DIR)
|
|
MANAGER_LDFLAGS += -lpthread
|
|
MANAGER_LDFLAGS += -lacrn-mngr
|
|
MANAGER_LDFLAGS += $(LDFLAGS)
|
|
|
|
.PHONY: all
|
|
ifeq ($(RELEASE),0)
|
|
all: $(OUT_DIR)/libacrn-mngr.a $(OUT_DIR)/acrn_mngr.h $(OUT_DIR)/acrnctl $(OUT_DIR)/acrnd
|
|
else
|
|
all: $(OUT_DIR)/libacrn-mngr.a $(OUT_DIR)/acrn_mngr.h $(OUT_DIR)/acrnd
|
|
endif
|
|
|
|
$(OUT_DIR)/libacrn-mngr.a: acrn_mngr.c acrn_mngr.h
|
|
$(CC) $(MANAGER_CFLAGS) -c acrn_mngr.c -o $(OUT_DIR)/acrn_mngr.o
|
|
ar -cr $@ $(OUT_DIR)/acrn_mngr.o
|
|
|
|
ifneq ($(OUT_DIR),.)
|
|
$(OUT_DIR)/acrn_mngr.h: ./acrn_mngr.h
|
|
cp ./acrn_mngr.h $(OUT_DIR)/
|
|
endif
|
|
|
|
$(OUT_DIR)/acrnctl: acrnctl.c acrn_mngr.h $(OUT_DIR)/libacrn-mngr.a
|
|
$(CC) -o $(OUT_DIR)/acrnctl acrnctl.c acrn_vm_ops.c $(MANAGER_CFLAGS) $(MANAGER_LDFLAGS)
|
|
|
|
$(OUT_DIR)/acrnd: acrnd.c $(OUT_DIR)/libacrn-mngr.a
|
|
$(CC) -o $(OUT_DIR)/acrnd acrnd.c acrn_vm_ops.c $(MANAGER_CFLAGS) $(MANAGER_LDFLAGS)
|
|
ifneq ($(OUT_DIR),.)
|
|
cp ./acrnd.service $(OUT_DIR)/acrnd.service
|
|
endif
|
|
|
|
.PHONY: clean
|
|
clean:
|
|
rm -f $(OUT_DIR)/acrnctl
|
|
rm -f $(OUT_DIR)/acrn_mngr.o
|
|
rm -f $(OUT_DIR)/libacrn-mngr.a
|
|
rm -f $(OUT_DIR)/acrnd
|
|
ifneq ($(OUT_DIR),.)
|
|
rm -f $(OUT_DIR)/acrn_mngr.h
|
|
rm -f $(OUT_DIR)/acrnd.service
|
|
rm -rf $(OUT_DIR)
|
|
endif
|
|
|
|
.PHONY: install
|
|
install:
|
|
install -d $(DESTDIR)/usr/bin
|
|
install -d $(DESTDIR)/usr/lib/systemd/system
|
|
install -d $(DESTDIR)/usr/lib64/
|
|
install -d $(DESTDIR)/usr/include/acrn
|
|
ifeq ($(RELEASE),0)
|
|
install -t $(DESTDIR)/usr/bin $(OUT_DIR)/acrnctl
|
|
endif
|
|
install -t $(DESTDIR)/usr/bin $(OUT_DIR)/acrnd
|
|
install -t $(DESTDIR)/usr/lib64/ $(OUT_DIR)/libacrn-mngr.a
|
|
install -t $(DESTDIR)/usr/include/acrn $(OUT_DIR)/acrn_mngr.h
|
|
install -p -D -m 0644 $(OUT_DIR)/acrnd.service $(DESTDIR)/usr/lib/systemd/system
|