From nobody Fri Apr 18 00:07:23 2025 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Zdw7Y1H1Hz5t1l6 for ; Fri, 18 Apr 2025 00:07:37 +0000 (UTC) (envelope-from wlosh@bsdimp.com) Received: from mail-pj1-x1034.google.com (mail-pj1-x1034.google.com [IPv6:2607:f8b0:4864:20::1034]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Zdw7X3CkZz3gnS for ; Fri, 18 Apr 2025 00:07:36 +0000 (UTC) (envelope-from wlosh@bsdimp.com) Authentication-Results: mx1.freebsd.org; none Received: by mail-pj1-x1034.google.com with SMTP id 98e67ed59e1d1-30820167b47so1463340a91.0 for ; Thu, 17 Apr 2025 17:07:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bsdimp-com.20230601.gappssmtp.com; s=20230601; t=1744934855; x=1745539655; darn=freebsd.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=HD6mTZb+Mg7b6tyt/Ievp2qtInNwOay+qIbqipf4Gzk=; b=HgDTUnY82SNKEa4Lkc9SB7Cpgc9kFzlpy3lkclN9/RiBDlIWUsnroeuvTmd6JBpTIB 8IFOrA2tjys3bwG8hZ36rozTgI4leRVge0oHMTSZhOwELYyI9pW19/Iy9sp/9ObkP7WB Oihpai3JtE8dbHdfi69F3WhXaX87bNgrZm1ZG2MvYtSnOAYanSnh5aP/dMc+t46M1Qx2 88gsIvZ/osoRsOzI8+GG+ki8BLAq5umy9V6rqbez/xNhoOyngBz1fghe4nybHhyl3IZV QkCr/hIBIymTrRn0igGvbr+ZO9u8UdKEbkq5+1W/DOkiHNOHQ6x8nRFGGIoqfv0LdXvS 4I+w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1744934855; x=1745539655; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=HD6mTZb+Mg7b6tyt/Ievp2qtInNwOay+qIbqipf4Gzk=; b=ATeJKIl4Qg78WOvY2bLZ6CSA37adufENsHZVjNMNbyOVnpQDe5VCvqmvmPPllG50Uk 5pKxU27EVB+8bIL8MEDZW3lPBmMe+vud/HZvqFzO+XaiY5ysIjPaPJViPugYa1zBoe5N lE2YqQn7OlHrv4396XTEAoXT68xfg/uTPp3KuI+H2opXqKaiapIlNAM0s2+3kR9Xbj6s ya95Rri+1CvFc6aF5KOzUEH1skiXFm3uk2c79tspWJsgsBoUrbcqu+m1kyotg3oWHDLy ZHYd4XW1SOJxtjP4y/2iqVWIAfVMHWUaOsBiJpsWGC1+wT13Sq3k2bPNiwqa2RG90q3K Yy1w== X-Forwarded-Encrypted: i=1; AJvYcCWmWLQpBnz3mOog07yuxqERB1hdybi10QU5VvmC+ewLuHzlXvFxEShGoh5vRwo5OnuE6Op1tnBHoytsnqK5Krei2ru3@freebsd.org X-Gm-Message-State: AOJu0Yz8gA2yOvEmCmNItVYSGsvbaS1VJnDrV73wF5PdNoiT4SM/yZif 6UN47jUE7RB3SV9HHTE63TmheS2LkVApcAEICvAmfOO0ndNLa8L6mpMNaQOD4cy3ciQlnnJDvu3 fKIGRBa6sNQvKjzGTcfoPmY13+hPmF915J0yM4w== X-Gm-Gg: ASbGncv+kjuwyG5/d7s3TxTDcwrnW5x/Z2qV6wUH7Klh4hWvlSgdcfbZv/9xYVMXULe +OI8iG+afktuiWBpW0HF/IBUASRgnUkHH+sOfROBZqdrf42VoStqRVZR+0zZFmiuB5Xm3Wd66Sv AFtEqo7YZzaq/XMxLoA3iG+0GLRPCkcQp88OhKq6Yk1nrnhek0hbRD9g== X-Google-Smtp-Source: AGHT+IG5WJbMgsJfnowaOggYWSvJ7pZzjk56hI6P09DB9JUwFr3wP6LC6UfqrqXFHYetmmros9/Fke8SJpUIf+CkvOw= X-Received: by 2002:a17:90b:5286:b0:2ff:6e58:89f5 with SMTP id 98e67ed59e1d1-3087c2c767emr1049056a91.6.1744934854614; Thu, 17 Apr 2025 17:07:34 -0700 (PDT) List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 References: <202504172159.53HLx828002496@gitrepo.freebsd.org> <3xjl6lsx2v6psvxfqeweu36wg5zdom5ew3xktvjj4a7tj7gjfe@hm2wxhn3ne4c> In-Reply-To: <3xjl6lsx2v6psvxfqeweu36wg5zdom5ew3xktvjj4a7tj7gjfe@hm2wxhn3ne4c> From: Warner Losh Date: Thu, 17 Apr 2025 18:07:23 -0600 X-Gm-Features: ATxdqUGBcyoKnr_l-93Sb7NsbVesCje6jFh0o_pTAb7KRT6QXodRx3Kh1AoTLBw Message-ID: Subject: Re: git: 58c99df2196c - main - kboot: .note.GNU-stack is needed To: Shawn Webb Cc: Warner Losh , src-committers , "" , "" Content-Type: multipart/alternative; boundary="0000000000002a82b40633024e31" X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US] X-Rspamd-Queue-Id: 4Zdw7X3CkZz3gnS X-Spamd-Bar: ---- --0000000000002a82b40633024e31 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, Apr 17, 2025, 4:26=E2=80=AFPM Shawn Webb wrote: > On Thu, Apr 17, 2025 at 09:59:08PM +0000, Warner Losh wrote: > > The branch main has been updated by imp: > > > > URL: > https://cgit.FreeBSD.org/src/commit/?id=3D58c99df2196c5564a6922dcfe4d0338= 7cebdd10c > > > > commit 58c99df2196c5564a6922dcfe4d03387cebdd10c > > Author: Warner Losh > > AuthorDate: 2025-04-17 04:03:26 +0000 > > Commit: Warner Losh > > CommitDate: 2025-04-17 21:56:45 +0000 > > > > kboot: .note.GNU-stack is needed > > > > Add '.section .note.GNU-stack,"",%progbits' to all assembler. Newer > > versions of clang complain when this isn't present because executab= le > > stacks are going away in the future. We don't need an executable > stack > > anyway. > > Just a little data point: HardenedBSD has lived without the ability to > mark the stack as executable for nearly a decade now. I'm pretty sure > it should be safe for FreeBSD to remove support for it as well, at > least for amd64, arm64, and likely also riscv. The only outlier might > be i386, but that no longer enjoys Tier 1 status on FreeBSD. > This code is for a linux binary. And i just added these to avoid new warnings. Warner Thanks, > > -- > Shawn Webb > Cofounder / Security Engineer > HardenedBSD > > Signal Username: shawn_webb.74 > Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50 > > https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/0= 3A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc > --0000000000002a82b40633024e31 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Thu, Apr 17, 2025, 4:26=E2=80= =AFPM Shawn Webb <shawn.we= bb@hardenedbsd.org> wrote:
O= n Thu, Apr 17, 2025 at 09:59:08PM +0000, Warner Losh wrote:
> The branch main has been updated by imp:
>
> URL: https://cgit.FreeBSD.org/src/commit/?id=3D58c99df2196c5564a6922dcfe4d033= 87cebdd10c
>
> commit 58c99df2196c5564a6922dcfe4d03387cebdd10c
> Author:=C2=A0 =C2=A0 =C2=A0Warner Losh <imp@FreeBSD.org>
> AuthorDate: 2025-04-17 04:03:26 +0000
> Commit:=C2=A0 =C2=A0 =C2=A0Warner Losh <imp@FreeBSD.org>
> CommitDate: 2025-04-17 21:56:45 +0000
>
>=C2=A0 =C2=A0 =C2=A0kboot: .note.GNU-stack is needed
>=C2=A0 =C2=A0 =C2=A0
>=C2=A0 =C2=A0 =C2=A0Add '.section .note.GNU-stack,"",%pro= gbits' to all assembler. Newer
>=C2=A0 =C2=A0 =C2=A0versions of clang complain when this isn't pres= ent because executable
>=C2=A0 =C2=A0 =C2=A0stacks are going away in the future. We don't n= eed an executable stack
>=C2=A0 =C2=A0 =C2=A0anyway.

Just a little data point: HardenedBSD has lived without the ability to
mark the stack as executable for nearly a decade now. I'm pretty sure it should be safe for FreeBSD to remove support for it as well, at
least for amd64, arm64, and likely also riscv. The only outlier might
be i386, but that no longer enjoys Tier 1 status on FreeBSD.

This code is fo= r a linux binary. And i just added these to avoid new warnings.

Warner

<= /div>
Thanks,

--
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

Signal Username:=C2=A0 shawn_webb.74
Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50
https://git.hardenedbsd.org/hardenedbsd/pubk= eys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.as= c
--0000000000002a82b40633024e31--