Re: Bug#1022787: libc6-dev: Lintian warns that all mips*el executables have executable stack
- To: Aurelien Jarno <aurel32@debian.org>, 1022787@bugs.debian.org, debian-mips@lists.debian.org, Simon McVittie <smcv@debian.org>, 1025436@bugs.debian.org
- Subject: Re: Bug#1022787: libc6-dev: Lintian warns that all mips*el executables have executable stack
- From: Guillem Jover <guillem@debian.org>
- Date: Mon, 16 Jan 2023 13:26:56 +0100
- Message-id: <Y8VCkN/fFrrAy1bD@thunder.hadrons.org>
- Mail-followup-to: Guillem Jover <guillem@debian.org>, Aurelien Jarno <aurel32@debian.org>, 1022787@bugs.debian.org, debian-mips@lists.debian.org, Simon McVittie <smcv@debian.org>, 1025436@bugs.debian.org
- In-reply-to: <[🔎] 20230116114722.csmivzmmd3342vjl@sym.noone.org>
- References: <Y1hB+cU/KB4oWx+d@momentum.pseudorandom.co.uk> <Y1hB+cU/KB4oWx+d@momentum.pseudorandom.co.uk> <Y1mT/EueOx0e/I8M@aurel32.net> <Y1hB+cU/KB4oWx+d@momentum.pseudorandom.co.uk> <Y6iqyImksSNnVTgf@aurel32.net> <[🔎] 20230116114722.csmivzmmd3342vjl@sym.noone.org>
Hi!
On Mon, 2023-01-16 at 12:47:23 +0100, Axel Beckert wrote:
> Aurelien Jarno wrote:
> > On 2022-10-26 22:09, Aurelien Jarno wrote:
> > > Note that the other official architecture still have a kernel
> > > compatibility set to 3.2, so that will make a difference between
> > > architectures. There are discussions to increase it upstream, but this
> > > won't happened for bookworm.
> > >
> > > On 2022-10-25 21:07, Simon McVittie wrote:
> > > > Or, if the mips porters consider this backwards compatibility to be
> > > > more important than the security hardening of a non-executable stack,
> > > > then Lintian should stop issuing warnings about the executable stack on
> > > > mips*el to improve its signal/noise ratio.
> > >
> > > At this stage there is nothing that can be done on the glibc side, the
> > > decision has to be taken by the mips porters.
> >
> > We are getting very close to the toolchain freeze. Any decision about
> > that?
>
> JFYI: There is the request to disable this tag completely on MIPS
> architectures in https://bugs.debian.org/1025436
>
> Now I wonder if this would actually help or worsen the situation for
> the glibc maintainers.
>
> Guillem: You wrote something about "bullseye" in #1025436. I think you
> meant "bookworm" instead. Am I right?
Indeed, sorry, I was going by Aurelien's comment, but botched the
release name. :) But in any case, I'll defer to whatever take Aurelien
or other glibc maintainers have on this.
Thanks,
Guillem
Reply to: