From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/1434
Path: news.gmane.org!not-for-mail
From: Kant <fnord.hammer@gmail.com>
Newsgroups: gmane.linux.lib.musl.general
Subject: Re: noexecstack
Date: Mon, 6 Aug 2012 23:11:33 +0200
Message-ID: <CAEmqk_xeynyvn0PNje=5FZe9AZh+bAY0JJ7Go6YhDhLRiziOHg@mail.gmail.com>
References: <CAPLrYEQ7bbBkmEhxE2KXe0ni_JePM25ni=cWybnn9DNv=PFUXA@mail.gmail.com>
	<20120805214624.GL544@brightrain.aerifal.cx>
	<20120806064306.GD30810@port70.net>
	<20120806093742.GA27715@brightrain.aerifal.cx>
	<20120806111918.GE30810@port70.net>
	<20120806113230.GB27715@brightrain.aerifal.cx>
Reply-To: musl@lists.openwall.com
NNTP-Posting-Host: plane.gmane.org
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
X-Trace: dough.gmane.org 1344287513 20890 80.91.229.3 (6 Aug 2012 21:11:53 GMT)
X-Complaints-To: usenet@dough.gmane.org
NNTP-Posting-Date: Mon, 6 Aug 2012 21:11:53 +0000 (UTC)
To: musl@lists.openwall.com
Original-X-From: musl-return-1435-gllmg-musl=m.gmane.org@lists.openwall.com Mon Aug 06 23:11:54 2012
Return-path: <musl-return-1435-gllmg-musl=m.gmane.org@lists.openwall.com>
Envelope-to: gllmg-musl@plane.gmane.org
Original-Received: from mother.openwall.net ([195.42.179.200])
	by plane.gmane.org with smtp (Exim 4.69)
	(envelope-from <musl-return-1435-gllmg-musl=m.gmane.org@lists.openwall.com>)
	id 1SyUaY-0000Ex-11
	for gllmg-musl@plane.gmane.org; Mon, 06 Aug 2012 23:11:46 +0200
Original-Received: (qmail 3420 invoked by uid 550); 6 Aug 2012 21:11:45 -0000
Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm
Precedence: bulk
List-Post: <mailto:musl@lists.openwall.com>
List-Help: <mailto:musl-help@lists.openwall.com>
List-Unsubscribe: <mailto:musl-unsubscribe@lists.openwall.com>
List-Subscribe: <mailto:musl-subscribe@lists.openwall.com>
Original-Received: (qmail 3412 invoked from network); 6 Aug 2012 21:11:45 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        bh=dNLtB7kkTSqV4blgJu/J2CjWLDos/tHSy/SKC0lAJqw=;
        b=Ks3bNYNuhVrOqDZDiZQs87IBuc2hTTIuqw4jP/mJOSl2llXdiHNAkFdZgMGyVXDkW7
         UqqShor2nyqCS6NbxghuiTKSsB4zeTU9Iv0tNgkwcl316M1uR+zh6pRR1AQx7kp1ubdC
         4vvdtFUq06mGrvqoq0i4Ii12tCskp6G/ADYfkVMDe5TcJiGEXFgiLM//pTqRWuByorhN
         0gWsPnvE0/RhFHMMWFlt9TdlEUkaVl5C0v1NPfVfbJFtrjctvyNpqvxmmiv0i/cBH0Qg
         A/n/OtTgJOc/UPoFw+/dbGyvwtwAiCzfi4+Ly/qY9CBs/4jzifCmHqd7GEw9Z/g8SXdQ
         3StA==
In-Reply-To: <20120806113230.GB27715@brightrain.aerifal.cx>
Xref: news.gmane.org gmane.linux.lib.musl.general:1434
Archived-At: <http://permalink.gmane.org/gmane.linux.lib.musl.general/1434>

The glibc build is using this. clang also supports this.

Should be okay to use.

On 6 August 2012 13:32, Rich Felker <dalias@aerifal.cx> wrote:
> On Mon, Aug 06, 2012 at 01:19:19PM +0200, Szabolcs Nagy wrote:
>> * Rich Felker <dalias@aerifal.cx> [2012-08-06 05:37:42 -0400]:
>> > > ld -z noexecstack
>> > This should work for libc.so. Is there a way to do it for all the .o
>> > files in libc.a without having to add the option to every application,
>> > though?
>>
>> it seems gnu as has an undocumented --noexecstack flag for this
>>
>>   gcc -Wa,--noexecstack -c foo.s
>>
>> adds the .notes.GNU-stack section
>
> So this seems to be the solution. I suspect it will need a configure
> check for the option being supported. Any other caveats?
>
> Rich