<div dir="ltr"><div dir="ltr">Hi all,<div><br></div><div>With the following change, position-independent executables became the default in Poky:</div><div><br></div><div><div>commit 491082c56ce34f3fd644f8d4457ccd52af951087</div><div>Author: Khem Raj <<a href="mailto:raj.khem@gmail.com">raj.khem@gmail.com</a>></div><div>Date:  Fri Jul 27 19:46:14 2018 -0700</div><div><br></div><div>  poky.conf: Enable security flags+pie by defaultEnable security flags+pie by </div><div>   </div><div>  This has been an opt-in for so long, some distributions e.g.</div><div>  poky-lsb uses it by default however, since most of linux</div><div>  distros have started to default to these settings for security</div><div>  enhancements, time has come for OE to make it default too</div></div><div><br></div><div>This carries the consequence that prelinking no longer really works. What's the recommendation for users that want to keep applying whole-system prelink optimizations (that is, image-prelink.bbclass)? Manually resetting SECURITY_CFLAGS to the empty string after including poky.conf will come close to undoing the effect of security_flags.inc, but there are a few places its effects will still leak out.</div><div><br></div><div>-Matt</div></div></div>