From patchwork Sun Oct 25 09:34:07 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Heiko Thiery X-Patchwork-Id: 1387141 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=busybox.net (client-ip=140.211.166.133; helo=hemlock.osuosl.org; envelope-from=buildroot-bounces@busybox.net; receiver=) Authentication-Results: ozlabs.org; dmarc=fail (p=none dis=none) header.from=gmail.com Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20161025 header.b=obpt54Jt; dkim-atps=neutral Received: from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 4CJt9c3Fm6z9sSG for ; Sun, 25 Oct 2020 20:35:16 +1100 (AEDT) Received: from localhost (localhost [127.0.0.1]) by hemlock.osuosl.org (Postfix) with ESMTP id E9FEF8758A; Sun, 25 Oct 2020 09:35:13 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from hemlock.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1F4u9CGjlDBi; Sun, 25 Oct 2020 09:35:12 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by hemlock.osuosl.org (Postfix) with ESMTP id A804187595; Sun, 25 Oct 2020 09:35:12 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137]) by ash.osuosl.org (Postfix) with ESMTP id C80CA1BF322 for ; Sun, 25 Oct 2020 09:35:10 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by fraxinus.osuosl.org (Postfix) with ESMTP id C488986B34 for ; Sun, 25 Oct 2020 09:35:10 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from fraxinus.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PlYBMCp81Vg4 for ; Sun, 25 Oct 2020 09:35:09 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-ed1-f68.google.com (mail-ed1-f68.google.com [209.85.208.68]) by fraxinus.osuosl.org (Postfix) with ESMTPS id 1FA3B86B11 for ; Sun, 25 Oct 2020 09:35:09 +0000 (UTC) Received: by mail-ed1-f68.google.com with SMTP id p13so6245697edi.7 for ; Sun, 25 Oct 2020 02:35:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=5uBjCBj8IPE3OkcIl51AA7GQ/Gx2+I0ziMayfS5Rn3Q=; b=obpt54JtJq87kmaoewUOonURHIjfVsiwTIVMx8Zw6FjyJsRengKgXOkhsdSXX3f0z8 FEwSYOUK99/JlrW7fxhu4fh9NeoeymB3Nt/zoTGIXlpgZgmGgG1xs7XRpCly9/aQPXSC wNdOEJbJZ8GEK1T/JL0RoXe/e9FIOUxb8HI2OnlHoni+BSIsncEJS1YqE0H+zQ0t6r8R eWzJQQt62jSIn+q6RBM92z4gzv/kZVeCTjGhyeArsckwC/1V5oTAMok9Yo+Wj/W9zT8+ jxf3QNcq5BkuFQIJPCL/uCeLEiOHsw3jVMvpgubuBLUwVxjzAB5C3Anitn4B6xPMHPWp EKfw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=5uBjCBj8IPE3OkcIl51AA7GQ/Gx2+I0ziMayfS5Rn3Q=; b=C+0s3DxF/RVl5N9UmXgjC9qBWE1vKSRYG8QFyOs4DKwJaF7YvAaO0r1NyxasJHMpu6 Zj8cD7sNU0kKWwEziIMHrSkTPr/wJO4kQJrPzmUNCjjU8O+aV7ForSzO3vGqQRheHqhp usIDzOTG6ggwqg/Gr/XbsFixzdk8j9A+/CR8lwc9hWJHtUK/r3uUhqIuXLlELSH1U1dW dKtE65lW9TFM1xA9YLzFfjMhmbj4A1AKLJmTror+AvI/+ZeCnDGX/tuSd5NtdV+c46MQ Ur6pcSTQ4mFDokz52gw9ruP6Bb40goY2lSm3bawHRIO3TBsnTVzz3y74j1mtVJxTll6D e15w== X-Gm-Message-State: AOAM532pvQEkZf39Lk1jUxgo7497Wg8bIkOTv0+SQZmiRevD3wOmzf3p WUAMqalyo0L65ItP4rEcN4fdSFxKYgY= X-Google-Smtp-Source: ABdhPJzzD07x9cir5NmbbOztK6GrkEqKaS03jS8hzrkUgCXdsRZ9RhdAC7p1CgX8iM0osE/MMX8Lxw== X-Received: by 2002:aa7:de86:: with SMTP id j6mr9809688edv.353.1603618506891; Sun, 25 Oct 2020 02:35:06 -0700 (PDT) Received: from t450s.fritz.box (ip1f1312b9.dynamic.kabel-deutschland.de. [31.19.18.185]) by smtp.gmail.com with ESMTPSA id by10sm1841959edb.86.2020.10.25.02.35.05 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 25 Oct 2020 02:35:06 -0700 (PDT) From: Heiko Thiery To: buildroot@buildroot.org Date: Sun, 25 Oct 2020 10:34:07 +0100 Message-Id: <20201025093407.4843-1-heiko.thiery@gmail.com> X-Mailer: git-send-email 2.20.1 MIME-Version: 1.0 Subject: [Buildroot] [PATCH 1/1] package/libcap: bump to version 2.44 X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Thomas Petazzoni , Heiko Thiery , Fabrice Fontaine , "Andrew G . Morgan" Errors-To: buildroot-bounces@busybox.net Sender: "buildroot" - remove patches that are already upstrem - modified and renumbered existing patch - add CROSS_COMPILE make arg - update hashfile for new version Signed-off-by: Heiko Thiery --- ...namic-test-compilation-and-execution.patch | 224 ------------------ ...isable-building-installing-shared-l.patch} | 4 +- ...-of-tcapsh-static-to-sudotest-target.patch | 55 ----- package/libcap/libcap.hash | 2 +- package/libcap/libcap.mk | 3 +- 5 files changed, 6 insertions(+), 282 deletions(-) delete mode 100644 package/libcap/0001-Support-dynamic-test-compilation-and-execution.patch rename package/libcap/{0003-libcap-Makefile-disable-building-installing-shared-l.patch => 0001-libcap-Makefile-disable-building-installing-shared-l.patch} (86%) delete mode 100644 package/libcap/0002-Migrate-all-uses-of-tcapsh-static-to-sudotest-target.patch diff --git a/package/libcap/0001-Support-dynamic-test-compilation-and-execution.patch b/package/libcap/0001-Support-dynamic-test-compilation-and-execution.patch deleted file mode 100644 index a456ea55d9..0000000000 --- a/package/libcap/0001-Support-dynamic-test-compilation-and-execution.patch +++ /dev/null @@ -1,224 +0,0 @@ -From 307e7f5744b7c84af4c07091c5310cf4f9514694 Mon Sep 17 00:00:00 2001 -From: "Andrew G. Morgan" -Date: Mon, 7 Sep 2020 12:24:43 -0700 -Subject: Support dynamic test compilation and execution. - - make DYNAMIC=yes test sudotest - -works now. Thomas Petazzoni provided a patch that built -the tests this way, but I've restructured things to -make the above command line work against the uninstalled -library builds. - -Signed-off-by: Andrew G. Morgan -[Retrieved from: -https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=307e7f5744b7c84af4c07091c5310cf4f9514694] -Signed-off-by: Fabrice Fontaine ---- - Make.Rules | 2 +- - go/Makefile | 6 +++--- - go/try-launching.go | 2 +- - progs/.gitignore | 1 + - progs/Makefile | 15 ++++++++++----- - progs/quicktest.sh | 8 ++++---- - tests/Makefile | 23 +++++++++++++++-------- - 7 files changed, 35 insertions(+), 22 deletions(-) - -diff --git a/Make.Rules b/Make.Rules -index c62f541..8c3f9b3 100644 ---- a/Make.Rules -+++ b/Make.Rules -@@ -69,7 +69,7 @@ WARNINGS=-Wall -Wwrite-strings \ - LD=$(CC) -Wl,-x -shared - LDFLAGS ?= #-g - LIBCAPLIB := -L$(topdir)/libcap -lcap --LIBPSXLIB := -L$(topdir)/libcap -lpsx -lpthread -+LIBPSXLIB := -L$(topdir)/libcap -lpsx -lpthread -Wl,-wrap,pthread_create - - BUILD_GPERF := $(shell which gperf >/dev/null 2>/dev/null && echo yes) - -diff --git a/go/Makefile b/go/Makefile -index c5ad7aa..19b3e29 100644 ---- a/go/Makefile -+++ b/go/Makefile -@@ -23,8 +23,8 @@ all: $(PSXGOPACKAGE) $(CAPGOPACKAGE) web compare-cap try-launching - $(DEPS): - make -C ../libcap all - --../progs/capsh: -- make -C ../progs capsh -+../progs/tcapsh-static: -+ make -C ../progs tcapsh-static - - src/$(IMPORTDIR)/psx: - mkdir -p "src/$(IMPORTDIR)" -@@ -70,7 +70,7 @@ ifeq ($(CGO_REQUIRED),0) - CGO_ENABLED="1" CGO_LDFLAGS_ALLOW="$(CGO_LDFLAGS_ALLOW)" GOPATH=$(GOPATH) $(GO) build -o $@-cgo $< - endif - --test: all ../progs/capsh -+test: all ../progs/tcapsh-static - CGO_LDFLAGS_ALLOW="$(CGO_LDFLAGS_ALLOW)" GOPATH="$(GOPATH)" $(GO) test $(IMPORTDIR)/psx - CGO_LDFLAGS_ALLOW="$(CGO_LDFLAGS_ALLOW)" GOPATH="$(GOPATH)" $(GO) test $(IMPORTDIR)/cap - LD_LIBRARY_PATH=../libcap ./compare-cap -diff --git a/go/try-launching.go b/go/try-launching.go -index 1c3d477..272fd0a 100644 ---- a/go/try-launching.go -+++ b/go/try-launching.go -@@ -32,7 +32,7 @@ func tryLaunching() { - }{ - {args: []string{root + "/go/ok"}}, - { -- args: []string{root + "/progs/capsh", "--dropped=cap_chown", "--is-uid=123", "--is-gid=456", "--has-a=cap_setuid"}, -+ args: []string{root + "/progs/tcapsh-static", "--dropped=cap_chown", "--is-uid=123", "--is-gid=456", "--has-a=cap_setuid"}, - iab: "!cap_chown,^cap_setuid,cap_sys_admin", - uid: 123, - gid: 456, -diff --git a/progs/.gitignore b/progs/.gitignore -index 1c7ff23..978229e 100644 ---- a/progs/.gitignore -+++ b/progs/.gitignore -@@ -1,4 +1,5 @@ - capsh -+tcapsh-static - getcap - getpcaps - setcap -diff --git a/progs/Makefile b/progs/Makefile -index 076e44f..1b27c41 100644 ---- a/progs/Makefile -+++ b/progs/Makefile -@@ -8,13 +8,15 @@ PROGS=getpcaps capsh getcap setcap - - BUILD=$(PROGS) - --ifneq ($(DYNAMIC),yes) -+ifeq ($(DYNAMIC),yes) -+LDPATH = LD_LIBRARY_PATH=../libcap -+else - LDFLAGS += --static - endif - - DEPS=../libcap/libcap.a ../libcap/libpsx.a - --all: $(BUILD) -+all: $(BUILD) tcapsh-static - - $(DEPS): - make -C ../libcap all -@@ -36,9 +38,12 @@ endif - - test: $(PROGS) - --sudotest: test -- sudo ./quicktest.sh -+tcapsh-static: capsh.c $(DEPS) -+ $(CC) $(IPATH) $(CAPSH_SHELL) $(CFLAGS) -o $@ $< $(LIBCAPLIB) $(LDFLAGS) --static -+ -+sudotest: test tcapsh-static -+ sudo $(LDPATH) ./quicktest.sh - - clean: - $(LOCALCLEAN) -- rm -f *.o $(BUILD) tcapsh ping hack.sh compare-cap -+ rm -f *.o $(BUILD) tcapsh* privileged ping hack.sh compare-cap -diff --git a/progs/quicktest.sh b/progs/quicktest.sh -index fbe98a6..5873317 100755 ---- a/progs/quicktest.sh -+++ b/progs/quicktest.sh -@@ -45,7 +45,7 @@ pass_capsh () { - pass_capsh --print - - # Make a local non-setuid-0 version of capsh and call it privileged --cp ./capsh ./privileged && /bin/chmod -s ./privileged -+cp ./tcapsh-static ./privileged && /bin/chmod -s ./privileged - if [ $? -ne 0 ]; then - echo "Failed to copy capsh for capability manipulation" - exit 1 -@@ -77,7 +77,7 @@ pass_capsh --mode=PURE1E --iab='!%cap_chown,cap_sys_admin' - pass_capsh --keep=0 --keep=1 --keep=0 --keep=1 --print - - /bin/rm -f tcapsh --/bin/cp capsh tcapsh -+/bin/cp tcapsh-static tcapsh - /bin/chown root.root tcapsh - /bin/chmod u+s tcapsh - /bin/ls -l tcapsh -@@ -166,7 +166,7 @@ pass_capsh --keep=1 --uid=$nouid --caps=cap_setpcap=ep \ - - # Verify we can chroot - pass_capsh --chroot=$(/bin/pwd) --pass_capsh --chroot=$(/bin/pwd) == -+pass_capsh -- -c "./tcapsh-static --chroot=$(/bin/pwd) ==" - fail_capsh --chroot=$(/bin/pwd) -- -c "echo oops" - - ./capsh --has-ambient -@@ -216,7 +216,7 @@ echo "testing namespaced file caps" - # nsprivileged capsh will have an ns rootid value (this is - # the same setup as an earlier test but with a ns file cap). - rm -f nsprivileged --cp ./capsh ./nsprivileged && /bin/chmod -s ./nsprivileged -+cp ./tcapsh-static ./nsprivileged && /bin/chmod -s ./nsprivileged - ./setcap -n 1 all=ep ./nsprivileged - if [ $? -eq 0 ]; then - ./getcap -n ./nsprivileged | fgrep "[rootid=1]" -diff --git a/tests/Makefile b/tests/Makefile -index 0c86ee8..a555887 100644 ---- a/tests/Makefile -+++ b/tests/Makefile -@@ -7,6 +7,12 @@ include ../Make.Rules - - DEPS=../libcap/libcap.a ../libcap/libpsx.a - -+ifeq ($(DYNAMIC),yes) -+LDPATH = LD_LIBRARY_PATH=../libcap -+else -+LDFLAGS += --static -+endif -+ - all: psx_test libcap_psx_test libcap_launch_test - - $(DEPS): -@@ -19,30 +25,31 @@ sudotest: test run_libcap_launch_test run_libcap_launch_test - install: all - - run_psx_test: psx_test -- ./psx_test -+ $(LDPATH) ./psx_test - - psx_test: psx_test.c $(DEPS) -- $(CC) $(CFLAGS) $(IPATH) $< -o $@ $(LIBPSXLIB) -Wl,-wrap,pthread_create -+ $(CC) $(CFLAGS) $(IPATH) $< -o $@ $(LIBPSXLIB) - - run_libcap_psx_test: libcap_psx_test -- ./libcap_psx_test -+ $(LDPATH) ./libcap_psx_test - - libcap_psx_test: libcap_psx_test.c $(DEPS) -- $(CC) $(CFLAGS) $(IPATH) $< -o $@ $(LIBCAPLIB) $(LIBPSXLIB) -Wl,-wrap,pthread_create --static -+ $(CC) $(CFLAGS) $(IPATH) $< -o $@ $(LIBCAPLIB) $(LIBPSXLIB) $(LDFLAGS) - - run_libcap_launch_test: libcap_launch_test libcap_psx_launch_test noop -- sudo ./libcap_launch_test -- sudo ./libcap_psx_launch_test -+ sudo $(LDPATH) ./libcap_launch_test -+ sudo $(LDPATH) ./libcap_psx_launch_test - - libcap_launch_test: libcap_launch_test.c $(DEPS) -- $(CC) $(CFLAGS) $(IPATH) $< -o $@ $(LIBCAPLIB) --static -+ $(CC) $(CFLAGS) $(IPATH) $< -o $@ $(LIBCAPLIB) $(LDFLAGS) - - # this varies only slightly from the above insofar as it currently - # only links in the pthreads fork support. TODO() we need to change - # the source to do something interesting with pthreads. - libcap_psx_launch_test: libcap_launch_test.c $(DEPS) -- $(CC) $(CFLAGS) $(IPATH) -DWITH_PTHREADS $< -o $@ $(LIBCAPLIB) $(LIBPSXLIB) -Wl,-wrap,pthread_create --static -+ $(CC) $(CFLAGS) $(IPATH) -DWITH_PTHREADS $< -o $@ $(LIBCAPLIB) $(LIBPSXLIB) $(LDFLAGS) - -+# This one runs in a chroot with no shared library files. - noop: noop.c - $(CC) $(CFLAGS) $< -o $@ --static - --- -cgit 1.2.3-1.el7 - diff --git a/package/libcap/0003-libcap-Makefile-disable-building-installing-shared-l.patch b/package/libcap/0001-libcap-Makefile-disable-building-installing-shared-l.patch similarity index 86% rename from package/libcap/0003-libcap-Makefile-disable-building-installing-shared-l.patch rename to package/libcap/0001-libcap-Makefile-disable-building-installing-shared-l.patch index d3a8bbec1d..6d49f235a9 100644 --- a/package/libcap/0003-libcap-Makefile-disable-building-installing-shared-l.patch +++ b/package/libcap/0001-libcap-Makefile-disable-building-installing-shared-l.patch @@ -5,6 +5,8 @@ Subject: [PATCH] libcap/Makefile: disable building/installing shared library when DYNAMIC is empty Signed-off-by: Thomas Petazzoni +[slightly manual modifications that patch still applies for libcap 2.44] +Signed-off-by: Heiko Thiery --- libcap/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) @@ -26,7 +28,7 @@ index 81b089e..dfd4dea 100644 test: cap_test ./cap_test --install: install-shared install-static +-install: install-static install-shared +install: $(if $(DYNAMIC),install-shared) install-static install-common: pcs diff --git a/package/libcap/0002-Migrate-all-uses-of-tcapsh-static-to-sudotest-target.patch b/package/libcap/0002-Migrate-all-uses-of-tcapsh-static-to-sudotest-target.patch deleted file mode 100644 index db1b00462f..0000000000 --- a/package/libcap/0002-Migrate-all-uses-of-tcapsh-static-to-sudotest-target.patch +++ /dev/null @@ -1,55 +0,0 @@ -From 159d53d71c7539719b3883bbdc7b113c876a5e55 Mon Sep 17 00:00:00 2001 -From: "Andrew G. Morgan" -Date: Mon, 7 Sep 2020 14:02:03 -0700 -Subject: [PATCH] Migrate all uses of tcapsh-static to sudotest target. - -Since sudotest is mostly the reason for using a static binary, force -all uses to be under this test target. - -Signed-off-by: Andrew G. Morgan -Signed-off-by: Thomas Petazzoni ---- - go/Makefile | 6 +++--- - progs/Makefile | 2 +- - 2 files changed, 4 insertions(+), 4 deletions(-) - -diff --git a/go/Makefile b/go/Makefile -index 19b3e29..508b380 100644 ---- a/go/Makefile -+++ b/go/Makefile -@@ -70,16 +70,16 @@ ifeq ($(CGO_REQUIRED),0) - CGO_ENABLED="1" CGO_LDFLAGS_ALLOW="$(CGO_LDFLAGS_ALLOW)" GOPATH=$(GOPATH) $(GO) build -o $@-cgo $< - endif - --test: all ../progs/tcapsh-static -+test: all - CGO_LDFLAGS_ALLOW="$(CGO_LDFLAGS_ALLOW)" GOPATH="$(GOPATH)" $(GO) test $(IMPORTDIR)/psx - CGO_LDFLAGS_ALLOW="$(CGO_LDFLAGS_ALLOW)" GOPATH="$(GOPATH)" $(GO) test $(IMPORTDIR)/cap - LD_LIBRARY_PATH=../libcap ./compare-cap -+ -+sudotest: test ../progs/tcapsh-static - ./try-launching - ifeq ($(CGO_REQUIRED),0) - ./try-launching-cgo - endif -- --sudotest: test - sudo ./try-launching - ifeq ($(CGO_REQUIRED),0) - sudo ./try-launching-cgo -diff --git a/progs/Makefile b/progs/Makefile -index 1b27c41..f416e59 100644 ---- a/progs/Makefile -+++ b/progs/Makefile -@@ -16,7 +16,7 @@ endif - - DEPS=../libcap/libcap.a ../libcap/libpsx.a - --all: $(BUILD) tcapsh-static -+all: $(BUILD) - - $(DEPS): - make -C ../libcap all --- -2.26.2 - diff --git a/package/libcap/libcap.hash b/package/libcap/libcap.hash index 6af96f7764..8850da0b32 100644 --- a/package/libcap/libcap.hash +++ b/package/libcap/libcap.hash @@ -1,5 +1,5 @@ # https://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2/sha256sums.asc -sha256 512a0e5fc4c1e06d472a20da26aa96a9b9bf2a26b23f094f77f1b8da56cc427f libcap-2.43.tar.xz +sha256 92188359cd5be86e8e5bd3f6483ac6ce582264f912398937ef763def2205c8e1 libcap-2.44.tar.xz # Hash for license file: sha256 088cabde4662b4121258d298b0b2967bc1abffa134457ed9bc4a359685ab92bc License diff --git a/package/libcap/libcap.mk b/package/libcap/libcap.mk index 3992efeeae..e09bc1a624 100644 --- a/package/libcap/libcap.mk +++ b/package/libcap/libcap.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBCAP_VERSION = 2.43 +LIBCAP_VERSION = 2.44 LIBCAP_SITE = https://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2 LIBCAP_SOURCE = libcap-$(LIBCAP_VERSION).tar.xz LIBCAP_LICENSE = GPL-2.0 or BSD-3-Clause @@ -16,6 +16,7 @@ LIBCAP_INSTALL_STAGING = YES HOST_LIBCAP_DEPENDENCIES = host-gperf LIBCAP_MAKE_FLAGS = \ + CROSS_COMPILE="$(TARGET_CROSS)" \ BUILD_CC="$(HOSTCC)" \ BUILD_CFLAGS="$(HOST_CFLAGS)" \ DYNAMIC=$(if $(BR2_STATIC_LIBS),,yes)