15102 2023-04-13 17:20:28 +0000 Using overrides on security flags may produce an incorrect meta-environment for the generated SDK 2026-10-01 15:48:12 +0000 1 1 7 Build System, Metadata & Runtime OE-Core devtools / tool chain 4.1.4 x86 Multiple NEW Medium+ normal 6.2 1 mark.hatle richard.purdie mark.hatle meta.mr.watcher meta.watcher randy.macleod richard.purdie --- --- Don't know oldest_to_newest 95359 0 mark.hatle 2023-04-13 17:20:28 +0000 I created a baremetal distribution file, and included: SECURITY_CFLAGS:class-target ?= "" SECURITY_LDFLAGS:class-target ?= "" require conf/distro/include/no-static-libs.inc require conf/distro/include/yocto-uninative.inc require conf/distro/include/security_flags.inc Building my (class-target) recipes, all of the values are expected. However when generating an SDK, the produced environment files included the security CFLAGS and LDFLAGS. I built my SDK using 'bitbake meta-toolchain', this in-turn uses 'meta-environment' recipe to construct and populate the environment files. It appears that meta-environment does not run in class-target context, so any overrides may be evaluated differently then a normal target recipe. This may affect both the mandatory and options cflags and ldflags, producing an incompatible environment file to the binaries in the system. OE baremetal configuration uses 'tclibc-baremetal' override, which likely is not present in the cross canadian contetext of meta-environemnt as well. 95372 1 richard.purdie 2023-04-14 15:55:06 +0000 My feeling is we may need to split meta-environment into two parts, one in target context and one in cross-canadian context since they can't access the right information of both contexts in one recipe. 95385 2 randy.macleod 2023-04-20 14:32:48 +0000 Mark, can you work at this? 95400 3 mark.hatle 2023-04-20 16:57:23 +0000 I will continue to explore this, but at this point I'm not sure how to fix it. Splitting the environments, as RP suggests is the probably the only reasonable way to deal with this -- but I'm not sure how to get the environments to split properly. I am fine if you assign this to me, but I can't promise I'll get a fix in the short term. 95406 4 randy.macleod 2023-04-20 18:53:45 +0000 Thanks Mark.