Bug 2508469 - Enable Shadow Stack by Default on x86_64
Summary: Enable Shadow Stack by Default on x86_64
Keywords:
Status: ASSIGNED
Alias: None
Product: Fedora
Classification: Fedora
Component: Changes Tracking
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Arjun Shankar
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: F46Changes
TreeView+ depends on / blocked
 
Reported: 2026-07-29 16:04 UTC by Aoife Moloney
Modified: 2026-08-31 17:00 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:
amoloney: needinfo-
fedora-admin-xmlrpc: mirror+

Attachments (Terms of Use)

Description Aoife Moloney 2026-07-29 16:04:03 UTC 
This is a tracking bug for Change: Enable Shadow Stack by Default on x86_64
For more details, see: https://fedoraproject.org/wiki/Changes/ShadowStack

This change enables Shadow Stack protection on applications and libraries built with gcc (C, C++), clang (C, C++), and rustc (Rust) by default on x86_64 machines that support it on Fedora Linux 45. The dynamic linker or static startup routines will activate Shadow Stack for any process whose binary and shared library dependencies are all built with Shadow Stack support (marked with ELF metadata), protecting processes by default whenever possible.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.
Comment 1 Aoife Moloney 2026-08-31 10:17:12 UTC 
Hi Arjun, has the work for this change been completed for F45? Or would you like to retarget to F46?
Comment 2 Aoife Moloney 2026-08-31 16:59:44 UTC 
removing needinfo as this change is retargeting F46
Note You need to log in before you can comment on or make changes to this bug.