Bug 2458434 - Enable Shadow Stack protection by default on x86_64 hardware supporting it
Summary: Enable Shadow Stack protection by default on x86_64 hardware supporting it
Keywords:
Status: ASSIGNED
Alias: None
Product: Fedora
Classification: Fedora
Component: glibc
Version: rawhide
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Arjun Shankar
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On: 2196282 2458478 2458657 2459530 2459558 2459565 2458184 2459561
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-04-14 20:14 UTC by Arjun Shankar
Modified: 2026-05-29 13:38 UTC (History)
14 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Arjun Shankar 2026-04-14 20:14:52 UTC 
We want to enable Shadow Stack protection by default on x86_64 machines that support it on Fedora Linux 45. The dynamic linker will activate Shadow Stack for any process whose binary and shared library dependencies are all built with Shadow Stack support, protecting processes by default whenever possible.

https://fedoraproject.org/wiki/Changes/ShadowStack

Reproducible: Always
Comment 1 Arjun Shankar 2026-04-19 16:31:17 UTC 
Missing support in rust-rpm-sequoia needs to come via a rust toolchain enhancement.
Comment 2 Arjun Shankar 2026-04-19 18:11:34 UTC 
glycin (glycin-libs and glycin-loaders) also depend on the rustc enhancement.
Comment 3 Arjun Shankar 2026-04-19 20:15:06 UTC 
librsvg2 also depends on the rustc enhancements.
Comment 4 Arjun Shankar 2026-04-19 22:31:51 UTC 
mozjs140 and rust-rav1e also depend on the rustc enhancement.
Comment 5 Arjun Shankar 2026-04-19 23:02:20 UTC 
This completes the initial testing and analysis work.
Note You need to log in before you can comment on or make changes to this bug.