Re: [PATCH v2 00/11] x86/EFI: prevent write-execute sections

On 08.04.2025 09:56, Roger Pau Monné wrote: > On Mon, Apr 07, 2025 at 04:04:18PM +0200, Jan Beulich wrote: >> On 01.04.2025 15:26, Roger Pau Monné wrote: >>> nxcompat should be enabled by default I think? I can of course make >>> it explicit by adding to the PE link command line. >> >> --nxcompat

Re: [PATCH v2 00/11] x86/EFI: prevent write-execute sections

On Mon, Apr 07, 2025 at 04:04:18PM +0200, Jan Beulich wrote: > On 01.04.2025 15:26, Roger Pau Monné wrote: > > nxcompat should be enabled by default I think? I can of course make > > it explicit by adding to the PE link command line. > > --nxcompat wasn't the default originally, then was made the

Re: [PATCH v2 00/11] x86/EFI: prevent write-execute sections

On 01.04.2025 15:26, Roger Pau Monné wrote: > nxcompat should be enabled by default I think? I can of course make > it explicit by adding to the PE link command line. --nxcompat wasn't the default originally, then was made the default for MinGW (and by mistake for everything else as well), then i

Re: [PATCH v2 00/11] x86/EFI: prevent write-execute sections

On 01.04.2025 15:26, Roger Pau Monné wrote: > On Tue, Apr 01, 2025 at 03:13:52PM +0200, Jan Beulich wrote: >> On 01.04.2025 15:08, Roger Pau Monne wrote: >>> Hello, >>> >>> The following series aim to remove the presence of any write and execute >>> section in the PE Xen image. This is required to

Re: [PATCH v2 00/11] x86/EFI: prevent write-execute sections

On Tue, Apr 01, 2025 at 03:13:52PM +0200, Jan Beulich wrote: > On 01.04.2025 15:08, Roger Pau Monne wrote: > > Hello, > > > > The following series aim to remove the presence of any write and execute > > section in the PE Xen image. This is required to support the NX > > compatible flag in the PE

Re: [PATCH v2 00/11] x86/EFI: prevent write-execute sections

On 01.04.2025 15:08, Roger Pau Monne wrote: > Hello, > > The following series aim to remove the presence of any write and execute > section in the PE Xen image. This is required to support the NX > compatible flag in the PE header. By the end of the series the > resulting PE image has no reloca

[PATCH v2 00/11] x86/EFI: prevent write-execute sections

Hello, The following series aim to remove the presence of any write and execute section in the PE Xen image. This is required to support the NX compatible flag in the PE header. By the end of the series the resulting PE image has no relocations that apply to text sections, as text sections are