We cannot really avoid such and we're also not really at risk because of them, as we control page table permissions ourselves rather than relying on a loader of some sort.
Signed-off-by: Jan Beulich <jbeul...@suse.com> --- a/xen/Makefile +++ b/xen/Makefile @@ -397,6 +397,8 @@ endif AFLAGS += -D__ASSEMBLY__ +LDFLAGS-$(call ld-option,--warn-rwx-segments) += --no-warn-rwx-segments + CFLAGS += $(CFLAGS-y) # allow extra CFLAGS externally via EXTRA_CFLAGS_XEN_CORE CFLAGS += $(EXTRA_CFLAGS_XEN_CORE)