This was discussed last week at a FESCo meeting and there were four points upon which clarification was requested:
1. Rust * Last week, rustc in Rawhide was updated to build SHSTK enabled binaries by default: https://bodhi.fedoraproject.org/updates/FEDORA-2026-8b11dfbab1 * I did an analysis of the state of Rawhide. The essential set of packages that need to be rebuilt are those which ship ".so" files built with rustc. This is so that when they are dlopen'ed by another application that is already running in SHSTK mode, there is no runtime error. The number of packages that need to be rebuilt is 85. 2. pypi wheels and other Python extensions: I think the way to tackle this is to discuss an upstream change in cpython CFLAGS (which are, e.g. inherited by manylinux which is used to build wheels). I have a patch ready, and have started this discussion: https://discuss.python.org/t/add-x86-64-shadow-stack-support-for-linux/108309 and filed a (for now closed, but I'd say there is no definitive verdict until the discussion proceeds) issue: https://github.com/python/cpython/issues/154820 3. Nvidia drivers I wasn't able to get the right combination of new enough CPU and Nvidia GPU to test this. But I am working on it and might get some help. e.g. I have contacted Adam and he might be able to get me something. 4. openssl modules So far, I haven't found anything incompatible. Can someone point me to anything that is incompatible and *not* built with Rust (which can be fixed now that Rust is updated): /usr/lib64/ossl-modules/fips.so Properties: x86 feature: IBT, SHSTK /usr/lib64/ossl-modules/legacy.so Properties: x86 feature: IBT, SHSTK /usr/lib64/ossl-modules/pkcs11.so Properties: x86 feature: IBT, SHSTK /usr/lib64/ossl-modules/pkcs11sign.so Properties: x86 feature: IBT, SHSTK /usr/lib64/ossl-modules/tpm2.so -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
