Re: F45 Change Proposal: Enable Shadow Stack by Default on x86_64 (system-wide)
Arjun Shankar via devel <[email protected]> Tue, 28 Jul 2026 18:59:55 +0200
| Newsgroups | gmane.linux.redhat.fedora.devel |
|---|---|
| Message-ID | <CAG_osaZidhrPQMT-oQK9xnFVrF_rUsry0dmPHKnR6xxYhdvwfw@mail.gmail.com> |
VGhpcyB3YXMgZGlzY3Vzc2VkIGxhc3Qgd2VlayBhdCBhIEZFU0NvIG1lZXRpbmcgYW5kIHRoZXJl IHdlcmUgZm91cg0KcG9pbnRzIHVwb24gd2hpY2ggY2xhcmlmaWNhdGlvbiB3YXMgcmVxdWVzdGVk Og0KDQoxLiBSdXN0DQoNCiogTGFzdCB3ZWVrLCBydXN0YyBpbiBSYXdoaWRlIHdhcyB1cGRhdGVk IHRvIGJ1aWxkIFNIU1RLIGVuYWJsZWQNCmJpbmFyaWVzIGJ5IGRlZmF1bHQ6DQpodHRwczovL2Jv ZGhpLmZlZG9yYXByb2plY3Qub3JnL3VwZGF0ZXMvRkVET1JBLTIwMjYtOGIxMWRmYmFiMQ0KDQoq IEkgZGlkIGFuIGFuYWx5c2lzIG9mIHRoZSBzdGF0ZSBvZiBSYXdoaWRlLiBUaGUgZXNzZW50aWFs IHNldCBvZg0KcGFja2FnZXMgdGhhdCBuZWVkIHRvIGJlIHJlYnVpbHQgYXJlIHRob3NlIHdoaWNo IHNoaXAgIi5zbyIgZmlsZXMNCmJ1aWx0IHdpdGggcnVzdGMuIFRoaXMgaXMgc28gdGhhdCB3aGVu IHRoZXkgYXJlIGRsb3BlbidlZCBieSBhbm90aGVyDQphcHBsaWNhdGlvbiB0aGF0IGlzIGFscmVh ZHkgcnVubmluZyBpbiBTSFNUSyBtb2RlLCB0aGVyZSBpcyBubyBydW50aW1lDQplcnJvci4gVGhl IG51bWJlciBvZiBwYWNrYWdlcyB0aGF0IG5lZWQgdG8gYmUgcmVidWlsdCBpcyA4NS4NCg0KMi4g cHlwaSB3aGVlbHMgYW5kIG90aGVyIFB5dGhvbiBleHRlbnNpb25zOg0KDQpJIHRoaW5rIHRoZSB3 YXkgdG8gdGFja2xlIHRoaXMgaXMgdG8gZGlzY3VzcyBhbiB1cHN0cmVhbSBjaGFuZ2UgaW4NCmNw eXRob24gQ0ZMQUdTICh3aGljaCBhcmUsIGUuZy4gaW5oZXJpdGVkIGJ5IG1hbnlsaW51eCB3aGlj aCBpcyB1c2VkDQp0byBidWlsZCB3aGVlbHMpLiBJIGhhdmUgYSBwYXRjaCByZWFkeSwgYW5kIGhh dmUgc3RhcnRlZCB0aGlzDQpkaXNjdXNzaW9uOiBodHRwczovL2Rpc2N1c3MucHl0aG9uLm9yZy90 L2FkZC14ODYtNjQtc2hhZG93LXN0YWNrLXN1cHBvcnQtZm9yLWxpbnV4LzEwODMwOQ0KYW5kIGZp bGVkIGEgKGZvciBub3cgY2xvc2VkLCBidXQgSSdkIHNheSB0aGVyZSBpcyBubyBkZWZpbml0aXZl DQp2ZXJkaWN0IHVudGlsIHRoZSBkaXNjdXNzaW9uIHByb2NlZWRzKSBpc3N1ZToNCmh0dHBzOi8v Z2l0aHViLmNvbS9weXRob24vY3B5dGhvbi9pc3N1ZXMvMTU0ODIwDQoNCjMuIE52aWRpYSBkcml2 ZXJzDQoNCkkgd2Fzbid0IGFibGUgdG8gZ2V0IHRoZSByaWdodCBjb21iaW5hdGlvbiBvZiBuZXcg ZW5vdWdoIENQVSBhbmQNCk52aWRpYSBHUFUgdG8gdGVzdCB0aGlzLiBCdXQgSSBhbSB3b3JraW5n IG9uIGl0IGFuZCBtaWdodCBnZXQgc29tZQ0KaGVscC4gZS5nLiBJIGhhdmUgY29udGFjdGVkIEFk YW0gYW5kIGhlIG1pZ2h0IGJlIGFibGUgdG8gZ2V0IG1lDQpzb21ldGhpbmcuDQoNCjQuIG9wZW5z c2wgbW9kdWxlcw0KDQpTbyBmYXIsIEkgaGF2ZW4ndCBmb3VuZCBhbnl0aGluZyBpbmNvbXBhdGli bGUuIENhbiBzb21lb25lIHBvaW50IG1lIHRvDQphbnl0aGluZyB0aGF0IGlzIGluY29tcGF0aWJs ZSBhbmQgKm5vdCogYnVpbHQgd2l0aCBSdXN0ICh3aGljaCBjYW4gYmUNCmZpeGVkIG5vdyB0aGF0 IFJ1c3QgaXMgdXBkYXRlZCk6DQoNCi91c3IvbGliNjQvb3NzbC1tb2R1bGVzL2ZpcHMuc28NCiAg ICAgIFByb3BlcnRpZXM6IHg4NiBmZWF0dXJlOiBJQlQsIFNIU1RLDQovdXNyL2xpYjY0L29zc2wt bW9kdWxlcy9sZWdhY3kuc28NCiAgICAgIFByb3BlcnRpZXM6IHg4NiBmZWF0dXJlOiBJQlQsIFNI U1RLDQovdXNyL2xpYjY0L29zc2wtbW9kdWxlcy9wa2NzMTEuc28NCiAgICAgIFByb3BlcnRpZXM6 IHg4NiBmZWF0dXJlOiBJQlQsIFNIU1RLDQovdXNyL2xpYjY0L29zc2wtbW9kdWxlcy9wa2NzMTFz aWduLnNvDQogICAgICBQcm9wZXJ0aWVzOiB4ODYgZmVhdHVyZTogSUJULCBTSFNUSw0KL3Vzci9s aWI2NC9vc3NsLW1vZHVsZXMvdHBtMi5zbw0KDQotLSAKX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18KZGV2ZWwgbWFpbGluZyBsaXN0IC0tIGRldmVsQGxpc3Rz LmZlZG9yYXByb2plY3Qub3JnClRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8gZGV2ZWwt bGVhdmVAbGlzdHMuZmVkb3JhcHJvamVjdC5vcmcKRmVkb3JhIENvZGUgb2YgQ29uZHVjdDogaHR0 cHM6Ly9kb2NzLmZlZG9yYXByb2plY3Qub3JnL2VuLVVTL3Byb2plY3QvY29kZS1vZi1jb25kdWN0 LwpMaXN0IEd1aWRlbGluZXM6IGh0dHBzOi8vZmVkb3JhcHJvamVjdC5vcmcvd2lraS9NYWlsaW5n X2xpc3RfZ3VpZGVsaW5lcwpMaXN0IEFyY2hpdmVzOiBodHRwczovL2xpc3RzLmZlZG9yYXByb2pl Y3Qub3JnL2FyY2hpdmVzL2xpc3QvZGV2ZWxAbGlzdHMuZmVkb3JhcHJvamVjdC5vcmcKRG8gbm90 IHJlcGx5IHRvIHNwYW0sIHJlcG9ydCBpdDogaHR0cHM6Ly9mb3JnZS5mZWRvcmFwcm9qZWN0Lm9y Zy9pbmZyYS90aWNrZXRzL2lzc3Vlcy9uZXcK