Bug#1107956: release-notes: Document CET hardening for amd64 (as companion to PAC/BTI on arm64)

Guillem Jover <[email protected]>
Newsgroups gmane.linux.debian.devel.documentation
Message-ID <aFHitd6MTpMZpv-0__34026.956236788$1750197100$gmane$org@thunder.hadrons.org>
Package: release-notes
X-Debbugs-Cc: Emanuele Rocca <[email protected]>

Hi!

There was a recent addition about PAC/BTI support for arm64. I think
it would make sense to also mention the Control-flow Enforcement
Technology (CET) support for amd64, that got added at the same time,
for the same dpkg-buildflags "branch" feature, which is also enabled
by default and ends up adding the «-fcf-protection» flag.

I'm not sure whether it would be best to reword the existing
"2.2.2. PAC/BTI support on arm64" section to cover both, or to add a
new section. Let me know what you think, and I could try to propose a
patch perhaps.

Thanks,
Guillem
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.