Re: Rebuilds to enable PAC and BTI support on arm64

2024-11-06 Thread Guillem Jover
Hi! On Wed, 2024-11-06 at 17:28:38 +0500, Andrey Rakhmatullin wrote: > On Wed, Nov 06, 2024 at 10:43:07AM +0100, Emanuele Rocca wrote: > > As a final thought, given that new toolchain versions bring multiple > > improvements over the years it's perhaps worth thinking about rebuilding > > the archi

Re: Rebuilds to enable PAC and BTI support on arm64

2024-11-06 Thread Andrey Rakhmatullin
On Wed, Nov 06, 2024 at 10:43:07AM +0100, Emanuele Rocca wrote: > As a final thought, given that new toolchain versions bring multiple > improvements over the years it's perhaps worth thinking about rebuilding > the archive on some sort of regular basis to make sure we get the > benefits? "Let's a

Re: Rebuilds to enable PAC and BTI support on arm64

2024-11-06 Thread Andreas Tille
Am Wed, Nov 06, 2024 at 01:16:57PM + schrieb Holger Levsen: > On Wed, Nov 06, 2024 at 05:28:38PM +0500, Andrey Rakhmatullin wrote: > > "Let's at least force rebuilds all packages not rebuilt since stable > > before every freeze starts" is a popular opinion. > > true. and "let's not do that" is

Re: Rebuilds to enable PAC and BTI support on arm64

2024-11-06 Thread Andrey Rakhmatullin
On Wed, Nov 06, 2024 at 01:16:57PM +, Holger Levsen wrote: > On Wed, Nov 06, 2024 at 05:28:38PM +0500, Andrey Rakhmatullin wrote: > > "Let's at least force rebuilds all packages not rebuilt since stable > > before every freeze starts" is a popular opinion. > > true. and "let's not do that" is

Re: Rebuilds to enable PAC and BTI support on arm64

2024-11-06 Thread Holger Levsen
On Wed, Nov 06, 2024 at 05:28:38PM +0500, Andrey Rakhmatullin wrote: > "Let's at least force rebuilds all packages not rebuilt since stable > before every freeze starts" is a popular opinion. true. and "let's not do that" is even more popular, else why haven't we done this in three decades? --

Re: Rebuilds to enable PAC and BTI support on arm64

2024-11-06 Thread Emanuele Rocca
On 2024-10-28 10:55, Sebastian Ramacher wrote: > since dpkg 1.22.0 the additional hardening flags to enable Pointer > Authentication (PAC) and Branch Target Identification (BTI) > on arm64 are enabled by default. Some more background and an update on this. Both PAC and BTI are enabled by adding -

Re: Rebuilds to enable PAC and BTI support on arm64

2024-10-31 Thread Holger Levsen
On Mon, Oct 28, 2024 at 10:55:57PM +0100, Sebastian Ramacher wrote: > since dpkg 1.22.0 the additional hardening flags to enable Pointer > Authentication (PAC) and Branch Target Identification (BTI) > on arm64 are enabled by default. See [1] for the discussion to enable > these flags. /me likes