Re: [PATCH] x86_64: test that userspace stack is in fact NX

From: Ingo Molnar
Date: Tue Oct 03 2023 - 15:31:03 EST



* Ingo Molnar <mingo@xxxxxxxxxx> wrote:

> Because not having NX in 2023 on any system that is threatened is a
> big security vulnerability in itself, and whether the vendor or owner
> intentionally did that or not doesn't really matter, and a failing
> kernel testcase will be the least of their problems.

BTW., it's also questionable whether the owner is *aware* of the fact that
NX is not available: what if some kernel debug option cleared the NX flag,
unintended, or there's some serious firmware bug?

However unlikely those situations might be, I think unconditionally warning
about NX not available is a very 2023 thing to do.

Thanks,

Ingo