[hjl@gnu-tgl-1 ~]$ readelf -n /lib64/libnettle.so.7 2>&1 | grep IBT [hjl@gnu-tgl-1 ~]$
The CET patch at https://gitlab.com/cet-software/nettle/-/tree/hjl/cet/master has been sent to the netttle owner.
The new version in Fedora Rawhide enables CET support: # rpm -q nettle nettle-3.6-1.fc33.x86_64 # readelf -n /lib64/libnettle.so.8 2>&1 | grep IBT Properties: x86 feature: IBT, SHSTK Could you please check if this is sufficient?
Since nettle-3.6: https://git.lysator.liu.se/nettle/nettle/-/commits/nettle_3.6_release_20200429 contains: https://git.lysator.liu.se/nettle/nettle/-/commit/99118f50b0f6cf695c82f3c2da7b9b5f9d850ef8 which enables CET, /lib64/libnettle.so.8 is good.