From 4c2d64c10a5b0437ab1ea04df22386f0f95124d1 Mon Sep 17 00:00:00 2001 From: Richard Purdie Date: Sat, 21 Feb 2026 08:42:29 +0000 Subject: [PATCH] distro/defaultsetup: Enable security flags by default This defaults to including our security flags which use stack-protector-strong and D_FORTIFY_SOURCE=2 by default, as aids to improve detection of security issues. This change has been tested in poky for a long time and allows us to align our default compilation flags and environment. Signed-off-by: Richard Purdie Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie --- meta/conf/distro/defaultsetup.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/conf/distro/defaultsetup.conf b/meta/conf/distro/defaultsetup.conf index e8f5439a8d..871fe7b4e8 100644 --- a/meta/conf/distro/defaultsetup.conf +++ b/meta/conf/distro/defaultsetup.conf @@ -6,6 +6,7 @@ require conf/distro/include/tcmode-${TCMODE}.inc require conf/distro/include/tclibc-${TCLIBC}.inc require conf/distro/include/no-static-libs.inc +require conf/distro/include/security_flags.inc require conf/distro/include/uninative-flags.inc require conf/distro/include/yocto-uninative.inc -- 2.47.3