Messages in this thread | | | From | "Edgecombe, Rick P" <> | Subject | Re: [RFC 37/37] fs/binfmt_elf: Block old shstk elf bit | Date | Mon, 7 Nov 2022 16:49:58 +0000 |
| |
On Sun, 2022-11-06 at 10:33 +0100, Florian Weimer wrote: > * H. J. Lu: > > > This change doesn't make a binary CET compatible. It just requires > > that the toolchain must be updated and all binaries have to be > > recompiled with the new toolchain to enable CET. It doesn't solve > > any > > issue which can't be solved by not updating glibc. > > Right, and it doesn't even address the library case (the kernel would > have to hook into mmap for that). The kernel shouldn't do this.
Shadow stack shouldn't enable as a result of loading a library, if that's what you mean.
| |