On 3/9/20 1:54 PM, H.J. Lu wrote: >> If a program with the magic ELF CET flags missing can’t make a >> thread with IBT and/or SHSTK enabled, then I think we’ve made an >> error and should fix it. >> > A non-CET program can start a CET program and vice versa. Could we be specific here, please? HJ are you saying that: * CET program can execve() a non-CET program, and * a non-CET program can execve() a CET program ? That's obvious. But what are the rules for clone()? Should there be rules for mismatches for CET enabling between threads if a process (not child processes)?