Enabling PAC/BTI support on arm64

2023-11-29 Thread Emanuele Rocca
Hi! I would like to ask for suggestions about the best way to enable PAC/BTI support in glibc and GCC on Debian. PAC and BTI are two useful Arm security features, see this recent presentation at the Mini Debconf for all details: [0] In order to properly support PAC/BTI in Debian we need to enabl

Re: Enabling PAC/BTI support on arm64

2023-12-04 Thread Emanuele Rocca
Hello Aurelien, On 2023-12-03 01:08, Aurelien Jarno wrote: > On 2023-11-29 09:56, Emanuele Rocca wrote: > > To add BTI to the NOTE section of the above, we would need to build both > > GCC and glibc with -mbranch-protection=standard. For gcc-13 I have > > proposed https://bu

Bug#1057469: gcc-12: Please build with -mbranch-protection=standard to enable PAC/BTI support on arm64

2023-12-05 Thread Emanuele Rocca
Package: gcc-12 Version: 12.3.0-12 X-Debbugs-Cc: debian-...@lists.debian.org, debian-glibc@lists.debian.org Dear Maintainer, PAC/BTI is a useful Arm security feature, see this recent presentation at the Cambridge Mini Debconf for all details: [0] In order to properly support PAC/BTI in Debian we

Re: Enabling PAC/BTI support on arm64

2023-12-05 Thread Emanuele Rocca
Hey Aurelien, On 2023-12-05 08:32, Aurelien Jarno wrote: > What about the patch below, it basically just change the compiler to > always enable -mbranch-protection=standard, and it's also used for the > configure script. > --- glibc-2.37/debian/sysdeps/arm64.mk > +++ glibc-2.37/debian/sysdeps/arm

Bug#1063515: glibc: Please build with -mbranch-protection=standard on arm64 to enable PAC/BTI support

2024-02-09 Thread Emanuele Rocca
Source: glibc Version: 2.37-15 Severity: wishlist Tags: patch User: debian-...@lists.debian.org Usertags: arm64 Control: block -1 by 1057469 Hi, As discussed on the debian-glibc mailing list [1], please consider building glibc on arm64 with -mbranch-protection=standard to enable support for the P

Bug#1063515: glibc: Please build with -mbranch-protection=standard on arm64 to enable PAC/BTI support

2024-07-10 Thread Emanuele Rocca
Hi, On 2024-02-09 11:36, Emanuele Rocca wrote: > In order to properly support PAC/BTI in Debian we need first GCC to > enable support for the feature, and that has not happened yet. PAC/BTI support is now turned on in GCC starting with 13.3.0-2. I have tried a glibc rebuild in sid wi