=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/73.html,v retrieving revision 1.52 retrieving revision 1.53 diff -u -r1.52 -r1.53 --- www/73.html 2023/04/08 10:56:51 1.52 +++ www/73.html 2023/04/08 11:05:00 1.53 @@ -765,11 +765,6 @@ --execute-only is enabled by default. In order of development: arm64, riscv64, hppa, amd64, powerpc64, powerpc (G5 only), octeon, and sparc64 (sun4u only; unfinished). -
  • On all architectures which lack hardware-enforcement of xonly, - system calls are now prevented from reading (via copyin(9)/copyinst) - inside the program's main text, ld.so text, sigtramp text, or libc.so - text.
  • These can still benefit from switching to --execute-only binaries if the cpu generates different traps for instruction-fetch versus data-fetch. The VM system will not allow memory to be read before it was executed