> So I guess my point is > > - ignore .note.GNU-stack sections at all, > - make stack non-executable by default, > - and implement -z execstack > > What do you think? I like it. Non executable stack should really be the default these days. Cheers, Rafael