Bug#1113774: Disabling -fcf-protection in sudo for bookworm
Marcos Del Sol Vives <[email protected]> Tue, 2 Sep 2025 17:31:27 +0200
| Newsgroups | gmane.linux.debian.devel.ctte |
|---|---|
| Message-ID | <240b6944-1dd6-4890-851b-239316051c5d__9783.66559590853$1756827570$gmane$org@orca.pet> |
El 02/09/2025 a las 17:14, Christoph Berg escribió: > Re: Stefano Rivera >> It seems that the intention of the new instruction was to be interpreted as >> a NOP on older hardware, but that obviously didn't happen on these non-Intel >> CPUs. > > https://lists.debian.org/debian-devel/2023/10/msg00120.html states > these processors are unsupported. > > Christoph The Pentium Pro manual, page 417, does not define instruction ENDBR32. https://psc.informatik.uni-jena.de/hw/p-pro-3.pdf. They are "reserved". If you are targetting and advertising i686-compatibility, do not use instructions that are not present in the Pentium Pro. What is the exact goal of keeping these instructions, even? I keep seeing you refuse because "it is not supported" but I don't understand what you wanna achieve exactly keeping them when the kernel will not support IBT.