From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 5 Aug 2021 16:00:45 +0000 (+0000)
Subject: glibc: Enable CET
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b2ae59ce63db63e8aba8616babd7c6c68c34e852;p=people%2Fms%2Fipfire-2.x.git

glibc: Enable CET

Enable Intel Control-flow Enforcement Technology (CET) support
to protect the library with indirect branch tracking (IBT) and
shadow stack (SHSTK).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/lfs/glibc b/lfs/glibc
index e7f2a71c53..9c631de4c1 100644
--- a/lfs/glibc
+++ b/lfs/glibc
@@ -65,6 +65,10 @@ EXTRA_CONFIG += \
 	--enable-bind-now \
 	--disable-crypt
 
+ifeq "$(BUILD_ARCH)" "x86_64"
+	EXTRA_CONFIG += --enable-cet
+endif
+
 ###############################################################################
 # Top-level Rules
 ###############################################################################