* CS Sushi Man via devel: > On Wednesday, July 1st, 2026 at 12:11, Aoife Moloney via devel-announce > <[email protected]> wrote: > >> == Summary == >> This change enables Shadow Stack protection on applications and >> libraries built with gcc (C, C++), clang (C, C++), and rustc (Rust) by >> default on x86_64 machines that support it on Fedora Linux 45. The >> dynamic linker or static startup routines will activate Shadow Stack >> for any process whose binary and shared library dependencies are all >> built with Shadow Stack support (marked with ELF metadata), protecting >> processes by default whenever possible. > > Shadow stack protection seems to be a relatively new > hardware-bound feature: > > https://www.kernel.org/doc/html/next/x86/shstk.html
On the silicon side, it is not that recent. It dates back to Ice Lake, Tiger Lake, and Zen 3. Linux support arrived very late. Support for shadow stack to the libgcc unwinder was added in GCC 8. That must have landed in Fedora 28. Thanks, Florian -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
