local.conf.sample: disable prelink

Recent tests have shown that prelinking works only when PIE is not
enabled [0], and as PIE is both a desirable security feature, and the only
configuration provided and tested by Yocto, there is simply no sense
in continuing to enable prelink.

There's also a concern that no one is maintaining the code, and there
are open bugs (including serious ones such as [1]). Given that prelink
does intricate address arithmetic and rewriting of binaries the best
option is to disable the feature.

[0]
https://rlbl.me/prelink-1
https://rlbl.me/prelink-2

[1] https://bugzilla.yoctoproject.org/show_bug.cgi?id=14429

(From meta-yocto rev: f712b495ce6362d50db3c5c565245535429d6419)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Alexander Kanavin
2021-07-31 16:01:53 +02:00
committed by Richard Purdie
parent 382e70c724
commit b205abd2ae

View File

@@ -148,8 +148,7 @@ EXTRA_IMAGE_FEATURES ?= "debug-tweaks"
# enable extra features. Some available options which can be included in this variable
# are:
# - 'buildstats' collect build statistics
# - 'image-prelink' in order to prelink the filesystem image
USER_CLASSES ?= "buildstats image-prelink"
USER_CLASSES ?= "buildstats"
#
# Runtime testing of images