Ongoing development

- Implement ENABLE_PIE_FLAG option to allow the PIE flags to be
  enabled or disabled. Disabled option to work around link issue.

Signed-off-by: Derek G Foster <[email protected]>

Author: ffoulkes

CMakeLists.txt

@@ -11,6 +11,7 @@ cmake_minimum_required(VERSION 3.15)
 set(CMAKE_BUILD_TYPE "RelWithDebInfo" CACHE STRING "Type of build to perform")
 
 # Include before the project() command.
+set(ENABLE_PIE_FLAG OFF)
 set(ENABLE_SANITIZE_CFI OFF)
 set(ENABLE_SPECTRE_FLAGS OFF)
 include(cmake/CompilerFlags.cmake)

cmake/CompilerFlags.cmake

@@ -7,6 +7,7 @@
 include(CMakePrintHelpers)
 
 option(ENABLE_WARNING_FLAGS "Enable compiler warnings" OFF)
+option(ENABLE_PIE_FLAG      "Enable position independent executables" ON)
 option(ENABLE_SANITIZE_CFI  "Enable -sanitize=cfi" ON)
 option(ENABLE_SPECTRE_FLAGS "Enable Spectre mitigations" ON)
 
@@ -128,7 +129,9 @@ function(_get_security_flags_list config cflags)
   setFlowIntegrity(config _cflags)
   setFormatDefense(config _cflags)
   setStackDefense(config _cflags)
-  setPIE(config _cflags)
+  if(ENABLE_PIE_FLAG)
+    setPIE(config _cflags)
+  endif()
   setRelocation(config _cflags)
 
   if(ENABLE_SPECTRE_FLAGS)