Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 17 Apr 2025 22:26:39 +0000
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        Warner Losh <imp@freebsd.org>
Cc:        src-committers@freebsd.org, dev-commits-src-all@freebsd.org,  dev-commits-src-main@freebsd.org
Subject:   Re: git: 58c99df2196c - main - kboot: .note.GNU-stack is needed
Message-ID:  <3xjl6lsx2v6psvxfqeweu36wg5zdom5ew3xktvjj4a7tj7gjfe@hm2wxhn3ne4c>
In-Reply-To: <202504172159.53HLx828002496@gitrepo.freebsd.org>
References:  <202504172159.53HLx828002496@gitrepo.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--5wf3wwp7ugw657d4
Content-Type: text/plain; protected-headers=v1; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Subject: Re: git: 58c99df2196c - main - kboot: .note.GNU-stack is needed
MIME-Version: 1.0

On Thu, Apr 17, 2025 at 09:59:08PM +0000, Warner Losh wrote:
> The branch main has been updated by imp:
>=20
> URL: https://cgit.FreeBSD.org/src/commit/?id=3D58c99df2196c5564a6922dcfe4=
d03387cebdd10c
>=20
> commit 58c99df2196c5564a6922dcfe4d03387cebdd10c
> Author:     Warner Losh <imp@FreeBSD.org>
> AuthorDate: 2025-04-17 04:03:26 +0000
> Commit:     Warner Losh <imp@FreeBSD.org>
> CommitDate: 2025-04-17 21:56:45 +0000
>=20
>     kboot: .note.GNU-stack is needed
>    =20
>     Add '.section .note.GNU-stack,"",%progbits' to all assembler. Newer
>     versions of clang complain when this isn't present because executable
>     stacks are going away in the future. We don't need an executable stack
>     anyway.

Just a little data point: HardenedBSD has lived without the ability to
mark the stack as executable for nearly a decade now. I'm pretty sure
it should be safe for FreeBSD to remove support for it as well, at
least for amd64, arm64, and likely also riscv. The only outlier might
be i386, but that no longer enjoys Tier 1 status on FreeBSD.

Thanks,

--=20
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

Signal Username:  shawn_webb.74
Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50
https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A=
4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc

--5wf3wwp7ugw657d4
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=neuV
-----END PGP SIGNATURE-----

--5wf3wwp7ugw657d4--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3xjl6lsx2v6psvxfqeweu36wg5zdom5ew3xktvjj4a7tj7gjfe>