From: Richard Purdie Date: Sat, 21 Feb 2026 08:42:29 +0000 (+0000) Subject: distro/defaultsetup: Enable security flags by default X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4c2d64c10a5b0437ab1ea04df22386f0f95124d1;p=thirdparty%2Fopenembedded%2Fopenembedded-core.git distro/defaultsetup: Enable security flags by default This defaults to including our security flags which use stack-protector-strong and D_FORTIFY_SOURCE=2 by default, as aids to improve detection of security issues. This change has been tested in poky for a long time and allows us to align our default compilation flags and environment. Signed-off-by: Richard Purdie Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie --- diff --git a/meta/conf/distro/defaultsetup.conf b/meta/conf/distro/defaultsetup.conf index e8f5439a8d..871fe7b4e8 100644 --- a/meta/conf/distro/defaultsetup.conf +++ b/meta/conf/distro/defaultsetup.conf @@ -6,6 +6,7 @@ require conf/distro/include/tcmode-${TCMODE}.inc require conf/distro/include/tclibc-${TCLIBC}.inc require conf/distro/include/no-static-libs.inc +require conf/distro/include/security_flags.inc require conf/distro/include/uninative-flags.inc require conf/distro/include/yocto-uninative.inc