> In portable software, a grep for PROT_EXEC finds almost all the work
> which still needs to be done...
I am suggesting grep is enough because the four forms one will find in
code are:
mmap(... PROT_EXEC, ...)
mprotect(... PROT_EXEC, ...)
prot = PROT_EXEC ...
mmap(... prot, ... )
prot = PROT_EXEC ...
mprotect(... prot, ....)
To improve the situation, the roadmap would be to find those in the
ecosystem, and ask people in those software projects to consider a
fresh evaluation and improvement...
Some of them will not be easy. But I've already mentioned chrome :)