| # SPDX-License-Identifier: LGPL-2.1-or-later |
| |
| [Match] |
| Environment=SANITIZERS |
| Environment=!SANITIZERS= |
| |
| [Content] |
| # Set verify_asan_link_order=0 to prevent ASAN warnings when building the image and make sure the real ASAN |
| # options are set when booting the image. |
| # Set intercept_tls_get_addr=0 to work around leak sanitizer segmentation fault in test-dlopen-so on CentOS |
| # Stream 9. |
| # TODO: Drop intercept_tls_get_addr=0 when we remove CentOS Stream 9 builds. |
| Environment=ASAN_OPTIONS=verify_asan_link_order=0:intercept_tls_get_addr=0 |
| KernelCommandLine= |
| ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1 |
| systemd.setenv=ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1 |
| UBSAN_OPTIONS=print_stacktrace=1:print_summary=1:halt_on_error=1 |
| systemd.setenv=UBSAN_OPTIONS=print_stacktrace=1:print_summary=1:halt_on_error=1 |
| LSAN_OPTIONS=suppressions=/usr/lib/systemd/leak-sanitizer-suppressions |
| systemd.setenv=LSAN_OPTIONS=suppressions=/usr/lib/systemd/leak-sanitizer-suppressions |
| |
| [Config] |
| Include=%D/mkosi.sanitizers |
