Re: Enabling PAC/BTI support on arm64

2023-12-05 Thread Emanuele Rocca
Hey Aurelien, On 2023-12-05 08:32, Aurelien Jarno wrote: > What about the patch below, it basically just change the compiler to > always enable -mbranch-protection=standard, and it's also used for the > configure script. > --- glibc-2.37/debian/sysdeps/arm64.mk > +++ glibc-2.37/debian/sysdeps/arm

Re: Enabling PAC/BTI support on arm64

2023-12-05 Thread Aurelien Jarno
Hi Emanuele, On 2023-12-04 16:13, Emanuele Rocca wrote: > Hello Aurelien, > > On 2023-12-03 01:08, Aurelien Jarno wrote: > > On 2023-11-29 09:56, Emanuele Rocca wrote: > > > To add BTI to the NOTE section of the above, we would need to build both > > > GCC and glibc with -mbranch-protection=stand

Re: Enabling PAC/BTI support on arm64

2023-12-04 Thread Emanuele Rocca
Hello Aurelien, On 2023-12-03 01:08, Aurelien Jarno wrote: > On 2023-11-29 09:56, Emanuele Rocca wrote: > > To add BTI to the NOTE section of the above, we would need to build both > > GCC and glibc with -mbranch-protection=standard. For gcc-13 I have > > proposed https://bugs.debian.org/1055711.

Re: Enabling PAC/BTI support on arm64

2023-12-03 Thread Aurelien Jarno
Hi Emanuele, On 2023-11-29 09:56, Emanuele Rocca wrote: > Hi! > > I would like to ask for suggestions about the best way to enable PAC/BTI > support in glibc and GCC on Debian. > > PAC and BTI are two useful Arm security features, see this recent > presentation at the Mini Debconf for all detail

Enabling PAC/BTI support on arm64

2023-11-29 Thread Emanuele Rocca
Hi! I would like to ask for suggestions about the best way to enable PAC/BTI support in glibc and GCC on Debian. PAC and BTI are two useful Arm security features, see this recent presentation at the Mini Debconf for all details: [0] In order to properly support PAC/BTI in Debian we need to enabl