Re: [PROPOSAL/PATCH] Remove PT_GNU_STACK support before 2.6.11

[Andi Kleen <ak@suse.de>]

>  Signed-off-by: Ingo Molnar <mingo@elte.hu>
> 
> (I'd like to stress that this problem only affects packages _recompiled_
> with new gcc, running on NX capable CPUs - legacy apps or CPUs are in no

Yeah, but who did the auditing of all user land packages if they
don't need changes? And who told user land developers that they need
to do this all if they only want to recompile software.

That hasn't been done as far as I can figure out, and I'm not really
willing to serve as the frontend/coordinator for this process on the x86-64 
side.

I would request that this stuff is only turned on by default
until there is a reasonable process found for this.

> way affected. Also, even with a recompile, apps/kernels/distros have a
> number of other options as well even without this kernel fix, of varying
> granularity: to use the setarch utility, to set the READ_IMPLIES_EXEC
> personality bit within the code, or to pass in the noexec=off kernel
> commandline option, or to add a oneliner patch to their heap of 1500+
> kernel patches, or to fix the application. Also, with Arjan's patch
> applied, the execstack utility can be used to remark the binary
> permanently, if needed.)

That would still leave the mainline users who just update their
kernels from a kernel.org tarball out in the rain.

And guess who they will complain to if their favourite program doesn't
work anymore in x86-64 32bit emulation?

-Andi