Bug#1107956: release-notes: Document CET hardening for amd64 (as companion to PAC/BTI on arm64)
Chris Hofstaedtler <[email protected]> Sun, 22 Jun 2025 01:11:25 +0200
| Newsgroups | gmane.linux.debian.devel.documentation |
|---|---|
| Message-ID | <aFc8HXVQnXVjbalK__43683.539451898$1750547604$gmane$org@per.namespace.at> |
On Wed, Jun 18, 2025 at 04:54:06PM +0200, Emanuele Rocca wrote: > On 2025-06-17 11:48, Guillem Jover wrote: > > There was a recent addition about PAC/BTI support for arm64. I think > > it would make sense to also mention the Control-flow Enforcement > > Technology (CET) support for amd64, that got added at the same time, > > for the same dpkg-buildflags "branch" feature, which is also enabled > > by default and ends up adding the «-fcf-protection» flag. > > > > I'm not sure whether it would be best to reword the existing > > "2.2.2. PAC/BTI support on arm64" section to cover both, or to add a > > new section. Let me know what you think, and I could try to propose a > > patch perhaps. > > I think it makes sense to reword the existing one, thanks for pointing > this out! Please somebody provide a patch, better: merge request. Thanks, Chris