intel / cc-oci-runtime

OCI (Open Containers Initiative) compatible runtime for Intel® Architecture
GNU General Public License v2.0
416 stars 59 forks source link

Consider building all packages with best practice security options #852

Open jodh-intel opened 7 years ago

jodh-intel commented 7 years ago

The following commits improved the build options for the runtime:

... but our install scripts also build other packages which have not had these flags applied:

Further, these options are not applied to OBS package builds for packages other than the runtime.

We should assess if all the new options we've added to the runtime can be applied to all other packages built in all environments.

dlespiau commented 7 years ago

x/arch/x86/x86asm: 64-bit CMOV is disassembled as 32-bit CMOV