x86_64 Shadow Stack By Default Retargeted For Fedora 46

x86_64 Shadow Stack By Default Retargeted For Fedora 46

In recent weeks there was a proposal to enable x86_64 Shadow Stack support by default with the upcoming Fedora Linux 45 release. That change has been approved now by the Fedora Engineering and Steering Committee (FESCo) but with the feature being punted off to Fedora 46 next year. At this week's FESCo meeting, the matter of the x86_64 shadow stack support by default was discussed. As a reminder, the change proposal is to enable Shadow Stack protection for applications/libraries compiled with GCC, LLVM Clang, or Rustc by default on x86_64. The dynamic linker or startic startup routines will activate Shadow Stack for any process where the binary and shared library dependencies are all built with Shadow Stack support present. Shadow Stacks are hardware-enforced by modern Intel and AMD CPUs to help fend off against Return-Oriented Programming "ROP" style exploits. Part of the reason for delaying this change from Fedora 45 to Fedora 46 is time for ensuring NVIDIA driver and PyPi Python wheel compatibility is addressed in time for playing nicely with Shadow Stacks. In any event the change is approved as one of the early features to look forward to with Fedora 46 next spring. Those curious about more details on these plans can learn more via the change proposal.

Original Source

Read the full article at Phoronix →

KhanList aggregates and links to publicly available news content. We do not host full articles from third-party sources. Always verify important information with original sources.