Re: F45 Change Proposal: Enable Shadow Stack by Default on x86_64 (system-wide)

Christoph Erhardt <[email protected]> Sun, 05 Jul 2026 00:45:25 +0200

Newsgroups	gmane.linux.redhat.fedora.devel
Message-ID	<[email protected]>

On Saturday, 4 July 2026 12:23:40 Central European Summer Time Vitaly Zaitsev 
via devel wrote:
> If this results in breaking NVIDIA drivers and other important 
> third-party software, then this is absolutely unacceptable.
This proposal will not affect kernel drivers since it only changes the 
system's behaviour in user mode. Kernel mode will remain unchanged.

The primary concerns regarding third-party user-level software are:
1. applications that claim to be compliant but are not,
2. non-compliant third-party plugins for compliant applications.

The 'tunables' mechanism described in the proposal can be used to work around 
both. Some system knowledge (and `root` privileges) are needed for creating a 
corresponding configuration file.

Notably, applications that do not falsely claim compliance will just keep 
working.

> Any performance impact on these old CPUs?
None at all.

Best regards,
Christoph

-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

signature.asc (application/pgp-signature, 833 B)