> We have an annotation we can use during ports build to mark binaries to > disable enforcement, this will get added to some ports with known > problems (but I think it maybe a bit problematic when it's a library > which doesn't yet work with IBT enforcement - in that case AIUI we'll > need to annotate all binaries using that library..)
That is the same mechanism wxneeded. The idea would be to immediately mark complicated binaries that don't work with IBT enforcement, and then things are good enough for users, revisit the situation to find out where actual problems are, and iterate at fixing them, learning the solution methods along the way.
