mirror of
https://github.com/torvalds/linux.git
synced 2025-12-07 20:06:24 +00:00
2092007aa3
With CONFIG_KLP_BUILD enabled, checksums are only needed during a klp-build run. There's no need to enable them for normal kernel builds. This also has the benefit of softening the xxhash dependency. Signed-off-by: Josh Poimboeuf <jpoimboe@kernel.org> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Tested-by: Michael Kelley <mhklinux@outlook.com> Link: https://patch.msgid.link/edbb1ca215e4926e02edb493b68b9d6d063e902f.1762990139.git.jpoimboe@kernel.org
53 lines
1.7 KiB
Makefile
53 lines
1.7 KiB
Makefile
# SPDX-License-Identifier: GPL-2.0
|
|
|
|
KBUILD_AFLAGS += -D__DISABLE_EXPORTS
|
|
KBUILD_CFLAGS += -D__DISABLE_EXPORTS -mcmodel=small -fPIC \
|
|
-Os -DDISABLE_BRANCH_PROFILING \
|
|
$(DISABLE_STACKLEAK_PLUGIN) \
|
|
$(DISABLE_LATENT_ENTROPY_PLUGIN) \
|
|
-fno-stack-protector -D__NO_FORTIFY \
|
|
-fno-jump-tables \
|
|
-include $(srctree)/include/linux/hidden.h
|
|
|
|
# disable ftrace hooks and LTO
|
|
KBUILD_CFLAGS := $(subst $(CC_FLAGS_FTRACE),,$(KBUILD_CFLAGS))
|
|
KBUILD_CFLAGS := $(filter-out $(CC_FLAGS_LTO),$(KBUILD_CFLAGS))
|
|
KASAN_SANITIZE := n
|
|
KCSAN_SANITIZE := n
|
|
KMSAN_SANITIZE := n
|
|
UBSAN_SANITIZE := n
|
|
KCOV_INSTRUMENT := n
|
|
|
|
obj-$(CONFIG_X86_64) += gdt_idt.o map_kernel.o
|
|
obj-$(CONFIG_AMD_MEM_ENCRYPT) += sme.o sev-startup.o
|
|
pi-objs := $(patsubst %.o,$(obj)/%.o,$(obj-y))
|
|
|
|
lib-$(CONFIG_X86_64) += la57toggle.o
|
|
lib-$(CONFIG_EFI_MIXED) += efi-mixed.o
|
|
|
|
#
|
|
# Disable objtool validation for all library code, which is intended
|
|
# to be linked into the decompressor or the EFI stub but not vmlinux
|
|
#
|
|
$(patsubst %.o,$(obj)/%.o,$(lib-y)): OBJECT_FILES_NON_STANDARD := y
|
|
|
|
#
|
|
# Invoke objtool for each object individually to check for absolute
|
|
# relocations, even if other objtool actions are being deferred.
|
|
#
|
|
$(pi-objs): objtool-enabled = 1
|
|
$(pi-objs): objtool-args = $(if $(delay-objtool),--dry-run,$(objtool-args-y)) --noabs
|
|
|
|
#
|
|
# Confine the startup code by prefixing all symbols with __pi_ (for position
|
|
# independent). This ensures that startup code can only call other startup
|
|
# code, or code that has explicitly been made accessible to it via a symbol
|
|
# alias.
|
|
#
|
|
$(obj)/%.pi.o: OBJCOPYFLAGS := --prefix-symbols=__pi_
|
|
$(obj)/%.pi.o: $(obj)/%.o FORCE
|
|
$(call if_changed,objcopy)
|
|
|
|
targets += $(obj-y)
|
|
obj-y := $(patsubst %.o,%.pi.o,$(obj-y))
|