macOS
Homebrew已验证 · 100%
brew install execstacklocal Homebrew formula metadata
安装
其他安装命令
Linux
Fedora dnf已验证 · 92%
sudo dnf install execstackFedora Rawhide package metadata · execstack · 来源: dl.fedoraproject.org
Ubuntu apt已验证 · 92%
sudo apt install execstackUbuntu 24.04 LTS package indexes · execstack · 来源: archive.ubuntu.com
openSUSE zypper已验证 · 92%
sudo zypper install execstackopenSUSE Tumbleweed package metadata · execstack · 来源: download.opensuse.org
概览
软件包摘要
Utility to set/clear/query executable stack bit
项目链接
命令和别名
- execstack
历史
项目历史与用法
execstack is a small ELF hardening utility from the prelink project. It exists to query, set, or clear the executable-stack requirement recorded in ELF program headers.
项目历史
The tool belongs to the early-2000s Linux transition away from assuming that process stacks were executable. Jakub Jelinek's 2003 binutils work introduced PT_GNU_STACK so compilers, assemblers, and linkers could describe whether an executable stack was needed; execstack provided a post-link command-line way to inspect and override that metadata.
The upstream prelink archive shows prelink tarballs beginning in 2001 and continuing through a 2013 snapshot. The execstack manual page was obtained from the prelink-20130503 tarball and dates the utility's documentation to October 2003.
采用历史
execstack became a packaging and security-maintenance utility rather than a day-to-day application. It is most useful when a third-party ELF binary or shared object has incorrect PT_GNU_STACK markings and a packager needs to verify or clear them without rebuilding the original source.
使用方式
The common workflow is intentionally narrow: run execstack -q to report whether files require an executable stack, execstack -c to mark known-safe objects as not requiring one, or execstack -s for the rare case where a binary really needs executable stack support.
为什么软件包爱好者会关心
Package maintainers care about execstack because it sits at the boundary between compiler metadata, linker policy, and runtime hardening. A single bad executable-stack bit can change security posture, so a tiny utility remains useful even after prelink itself stopped being fashionable.
时间线
- 2001: The prelink archive begins publishing source snapshots.
- 2003: PT_GNU_STACK support is proposed for binutils.
- 2003: execstack documentation describes querying and changing PT_GNU_STACK markings.
- 2013: The prelink archive publishes a later source snapshot used by manual-page renderers.
Related projects
- execstack is tied to prelink, GNU binutils, GCC .note.GNU-stack metadata, and ELF dynamic-linker hardening behavior.
来源
安全态势
风险级别：绿色
narrow executable package without higher-risk signals.
风险分类器
绿色 风险 · 低 置信度 · appliance
原因
- narrow executable package without higher-risk signals
信号
- metadata:no-higher-risk-signals
安装行为
- 未记录 Homebrew bottle 元数据。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
execstack | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-08-03
管理器版本20130503
管理器更新时间2026-07-03
本地数据未知
上游不可用
检测到的最新版本未检测到
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:execstack |
|---|---|
| 版本 | 20130503 |
| 软件包管理器 | Homebrew |
| 主页 | https://people.redhat.com/jakub/prelink/ |
| 最后更新 | 2026-07-03T15:24:00-04:00 |
| Pulse | updated |
| Bottle | 未记录 |
| 服务 | 未声明 |
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Ubuntu apt95%
execstack 0.0.20131005-1.1ubuntu1
ELF GNU_STACK program header editing utility
sudo apt install execstack- Section: universe/admin
- Architecture: amd64
- Source Package: prelink
- 3 依赖
- normalized package name match
- 匹配方式：Execstack
dnf95%
execstack 0.5.0-33.fc45
Utility to set/clear/query executable stack bit
sudo dnf install execstack- License: GPL-2.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: execstack
- 10 依赖
- 1 提供
- normalized package name match
- 匹配方式：Execstack
zypper95%
execstack 0.5.0-5.8
Utility to set/clear/query executable stack bit
https://github.com/keszybz/prelink/archive
sudo zypper install execstack- License: GPL-2.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: execstack
- 9 依赖
- 1 提供
- normalized package name match
- 匹配方式：Execstack
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation