From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 5 Aug 2021 16:00:45 +0000 (+0000)
Subject: glibc: Enable CET
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=319f71c86a32c89af7e4750dc252aeb68836e999;p=people%2Fms%2Fipfire-2.x.git

glibc: Enable CET

Enable Intel Control-flow Enforcement Technology (CET) support
to protect the library with indirect branch tracking (IBT) and
shadow stack (SHSTK).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/lfs/glibc b/lfs/glibc
index 4bc8dd40d2..6f3f3a274f 100644
--- a/lfs/glibc
+++ b/lfs/glibc
@@ -69,6 +69,14 @@ EXTRA_CONFIG += \
 	--enable-bind-now \
 	--disable-crypt
 
+ifeq "$(BUILD_ARCH)" "x86_64"
+	EXTRA_CONFIG += --enable-cet
+endif
+
+ifeq "$(BUILD_ARCH)" "i586"
+	EXTRA_CONFIG += --enable-cet
+endif
+
 ###############################################################################
 # Top-level Rules
 ###############################################################################