On Wed, Jun 24, 2020 at 12:39:24PM -0700, Kees Cook wrote: > On Wed, Jun 24, 2020 at 07:51:48PM +0300, Dan Carpenter wrote: > > In Debian testing the initrd triggers the warning. > > > > [ 34.529809] process '/usr/bin/fstype' started with executable stack > > Where does fstype come from there? I am going to guess it is either > busybox or linked against klibc? > > klibc has known problems with executable stacks due to its trampoline > implementation: > https://wiki.ubuntu.com/SecurityTeam/Roadmap/ExecutableStacks
Yeah. It comes from klibc-utils. regards, dan carpenter

