https://bugzilla.redhat.com/show_bug.cgi?id=652297#c66 The package maintainer can turn off execstack when linking the app by adding "-Wl,-z,noexecstack" to the LDFLAGS (or CFLAGS) in the Makefile. This takes precedence over .o files or libraries that request execstack, either deliberately or because some .S assembly language file forgot to use ".section .note.GNU-stack,"",@progbits" where the empty attribute string "" turns off execstack. -- -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
