From nobody Fri Apr 18 00:07:23 2025 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Zdw7f2PPBz5t1l7 for ; Fri, 18 Apr 2025 00:07:42 +0000 (UTC) (envelope-from wlosh@bsdimp.com) Received: from mail-pj1-x102e.google.com (mail-pj1-x102e.google.com [IPv6:2607:f8b0:4864:20::102e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Zdw7d3CwLz3h1H for ; Fri, 18 Apr 2025 00:07:36 +0000 (UTC) (envelope-from wlosh@bsdimp.com) Authentication-Results: mx1.freebsd.org; none Received: by mail-pj1-x102e.google.com with SMTP id 98e67ed59e1d1-30863b48553so2011224a91.0 for ; Thu, 17 Apr 2025 17:07:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bsdimp-com.20230601.gappssmtp.com; s=20230601; t=1744934855; x=1745539655; darn=freebsd.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=HD6mTZb+Mg7b6tyt/Ievp2qtInNwOay+qIbqipf4Gzk=; b=HgDTUnY82SNKEa4Lkc9SB7Cpgc9kFzlpy3lkclN9/RiBDlIWUsnroeuvTmd6JBpTIB 8IFOrA2tjys3bwG8hZ36rozTgI4leRVge0oHMTSZhOwELYyI9pW19/Iy9sp/9ObkP7WB Oihpai3JtE8dbHdfi69F3WhXaX87bNgrZm1ZG2MvYtSnOAYanSnh5aP/dMc+t46M1Qx2 88gsIvZ/osoRsOzI8+GG+ki8BLAq5umy9V6rqbez/xNhoOyngBz1fghe4nybHhyl3IZV QkCr/hIBIymTrRn0igGvbr+ZO9u8UdKEbkq5+1W/DOkiHNOHQ6x8nRFGGIoqfv0LdXvS 4I+w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1744934855; x=1745539655; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=HD6mTZb+Mg7b6tyt/Ievp2qtInNwOay+qIbqipf4Gzk=; b=n98h/VpZUZenWIyuSP16t4dyOZNjW7j+r7vvbMvj0TTVjXeJd52+yWEwMH9YKNKn8t FD5UoZoRzrLC9bEyo2bEDvv6in9RcCGEaLkngElHqBwBUCjO9PsC5azGbotfVeMrmlY3 QQ2Ky0GYRKobMKKdww5FuWb2uUykbxigqE2GnHYkasa9LSPEcGXwBXCMdSW6v40gBe2z arU2Wl7/eTRjrnpoNryA08JqO/YB8QIsoodQ7AOxwvridoTesysX4zARqXplsgS1ikzm 0CjiC10flpRQtp7PHoPzu2e9XiMs/aWbujtutQmrXPiZ+jEYs5piXGMfjFU4tHR0BEc3 goPQ== X-Forwarded-Encrypted: i=1; AJvYcCVlyCrqkqs41C49+5TKKLI/ErPOt2fBOc8AtX5mXD38wkYpunK2KJXN/dCKAHwWs6u+xs4Nq+4gmHks7WcxmULZKlxyfw==@freebsd.org X-Gm-Message-State: AOJu0YxwsBVJ5u11jSJhv5sZpbz7cZT3hOb70+xvqJUs9520PgVY5BtA 1Zi/t2S95zcqfM0gzHnFSCgKUtfmWv+1dnpyz+YIOaNUcCmCKc8lIZ0J5SuRFbxKTJcYda/fLT8 8bZh6jZwCB8xQW7ua2fJgydFBVMWjqYqsx1nPrQ== X-Gm-Gg: ASbGncsMwCl4f3fF6Imcap2RDsu+xgn5xg4pxNuSb2NRVn3s63SAevk9c6DID9i4vyI P6eQfugGgsX3lv/24ZC4zfJfaQvfH9w7dQw/zkiZFPKDCpv+aS5D0G0hUui7P6ZaP2uqu8v4TbM PyPG63kK3EKp0lqDW0Pz9o8fUrqaGi6nOllhNSUpqPtMA3XY4NzU4x1Q== X-Google-Smtp-Source: AGHT+IG5WJbMgsJfnowaOggYWSvJ7pZzjk56hI6P09DB9JUwFr3wP6LC6UfqrqXFHYetmmros9/Fke8SJpUIf+CkvOw= X-Received: by 2002:a17:90b:5286:b0:2ff:6e58:89f5 with SMTP id 98e67ed59e1d1-3087c2c767emr1049056a91.6.1744934854614; Thu, 17 Apr 2025 17:07:34 -0700 (PDT) List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 References: <202504172159.53HLx828002496@gitrepo.freebsd.org> <3xjl6lsx2v6psvxfqeweu36wg5zdom5ew3xktvjj4a7tj7gjfe@hm2wxhn3ne4c> In-Reply-To: <3xjl6lsx2v6psvxfqeweu36wg5zdom5ew3xktvjj4a7tj7gjfe@hm2wxhn3ne4c> From: Warner Losh Date: Thu, 17 Apr 2025 18:07:23 -0600 X-Gm-Features: ATxdqUGBcyoKnr_l-93Sb7NsbVesCje6jFh0o_pTAb7KRT6QXodRx3Kh1AoTLBw Message-ID: Subject: Re: git: 58c99df2196c - main - kboot: .note.GNU-stack is needed To: Shawn Webb Cc: Warner Losh , src-committers , "" , "" Content-Type: multipart/alternative; boundary="0000000000002a82b40633024e31" X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US] X-Rspamd-Queue-Id: 4Zdw7d3CwLz3h1H X-Spamd-Bar: ---- --0000000000002a82b40633024e31 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, Apr 17, 2025, 4:26=E2=80=AFPM Shawn Webb wrote: > On Thu, Apr 17, 2025 at 09:59:08PM +0000, Warner Losh wrote: > > The branch main has been updated by imp: > > > > URL: > https://cgit.FreeBSD.org/src/commit/?id=3D58c99df2196c5564a6922dcfe4d0338= 7cebdd10c > > > > commit 58c99df2196c5564a6922dcfe4d03387cebdd10c > > Author: Warner Losh > > AuthorDate: 2025-04-17 04:03:26 +0000 > > Commit: Warner Losh > > CommitDate: 2025-04-17 21:56:45 +0000 > > > > kboot: .note.GNU-stack is needed > > > > Add '.section .note.GNU-stack,"",%progbits' to all assembler. Newer > > versions of clang complain when this isn't present because executab= le > > stacks are going away in the future. We don't need an executable > stack > > anyway. > > Just a little data point: HardenedBSD has lived without the ability to > mark the stack as executable for nearly a decade now. I'm pretty sure > it should be safe for FreeBSD to remove support for it as well, at > least for amd64, arm64, and likely also riscv. The only outlier might > be i386, but that no longer enjoys Tier 1 status on FreeBSD. > This code is for a linux binary. And i just added these to avoid new warnings. Warner Thanks, > > -- > Shawn Webb > Cofounder / Security Engineer > HardenedBSD > > Signal Username: shawn_webb.74 > Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50 > > https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/0= 3A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc > --0000000000002a82b40633024e31 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Thu, Apr 17, 2025, 4:26=E2=80= =AFPM Shawn Webb <shawn.we= bb@hardenedbsd.org> wrote:
O= n Thu, Apr 17, 2025 at 09:59:08PM +0000, Warner Losh wrote:
> The branch main has been updated by imp:
>
> URL: https://cgit.FreeBSD.org/src/commit/?id=3D58c99df2196c5564a6922dcfe4d033= 87cebdd10c
>
> commit 58c99df2196c5564a6922dcfe4d03387cebdd10c
> Author:=C2=A0 =C2=A0 =C2=A0Warner Losh <imp@FreeBSD.org>
> AuthorDate: 2025-04-17 04:03:26 +0000
> Commit:=C2=A0 =C2=A0 =C2=A0Warner Losh <imp@FreeBSD.org>
> CommitDate: 2025-04-17 21:56:45 +0000
>
>=C2=A0 =C2=A0 =C2=A0kboot: .note.GNU-stack is needed
>=C2=A0 =C2=A0 =C2=A0
>=C2=A0 =C2=A0 =C2=A0Add '.section .note.GNU-stack,"",%pro= gbits' to all assembler. Newer
>=C2=A0 =C2=A0 =C2=A0versions of clang complain when this isn't pres= ent because executable
>=C2=A0 =C2=A0 =C2=A0stacks are going away in the future. We don't n= eed an executable stack
>=C2=A0 =C2=A0 =C2=A0anyway.

Just a little data point: HardenedBSD has lived without the ability to
mark the stack as executable for nearly a decade now. I'm pretty sure it should be safe for FreeBSD to remove support for it as well, at
least for amd64, arm64, and likely also riscv. The only outlier might
be i386, but that no longer enjoys Tier 1 status on FreeBSD.

This code is fo= r a linux binary. And i just added these to avoid new warnings.

Warner

<= /div>
Thanks,

--
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

Signal Username:=C2=A0 shawn_webb.74
Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50
https://git.hardenedbsd.org/hardenedbsd/pubk= eys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.as= c
--0000000000002a82b40633024e31--