# 使用 Homebrew, dnf, apt, zypper 安装 execstack
查看 execstack 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。
## 安装
```sh
sudo av install brew:execstack
```
其他安装命令:
### macOS
- Homebrew (100%):
```sh
brew install execstack
```
证据: local Homebrew formula metadata
### Linux
- dnf (92%):
```sh
sudo dnf install execstack
```
证据: Fedora Rawhide package metadata: execstack from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst
- Ubuntu apt (92%):
```sh
sudo apt install execstack
```
证据: Ubuntu 24.04 LTS package indexes: execstack from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
- zypper (92%):
```sh
sudo zypper install execstack
```
证据: openSUSE Tumbleweed package metadata: execstack from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
## 软件包事实
- **软件包键:** brew:execstack
- **软件包管理器:** Homebrew
- **版本:** 20130503
- **来源摘要:** Utility to set/clear/query executable stack bit
- **主页:**
- **最后更新:** 2026-07-03T15:24:00-04:00
- **已生成:** 2026-08-03T19:37:03+00:00
## 可执行文件
- execstack (别名)
## 安装行为
- Bottle: 不可用
## 版本和新鲜度
- 页面生成时间: 2026-08-03
- 管理器版本: 20130503
## 项目历史与用法
execstack is a small ELF hardening utility from the prelink project. It exists to query, set, or clear the executable-stack requirement recorded in ELF program headers.
### 项目历史
The tool belongs to the early-2000s Linux transition away from assuming that process stacks were executable. Jakub Jelinek's 2003 binutils work introduced PT_GNU_STACK so compilers, assemblers, and linkers could describe whether an executable stack was needed; execstack provided a post-link command-line way to inspect and override that metadata.
The upstream prelink archive shows prelink tarballs beginning in 2001 and continuing through a 2013 snapshot. The execstack manual page was obtained from the prelink-20130503 tarball and dates the utility's documentation to October 2003.
### 采用历史
execstack became a packaging and security-maintenance utility rather than a day-to-day application. It is most useful when a third-party ELF binary or shared object has incorrect PT_GNU_STACK markings and a packager needs to verify or clear them without rebuilding the original source.
### 使用方式
The common workflow is intentionally narrow: run execstack -q to report whether files require an executable stack, execstack -c to mark known-safe objects as not requiring one, or execstack -s for the rare case where a binary really needs executable stack support.
### 为什么软件包爱好者会关心
Package maintainers care about execstack because it sits at the boundary between compiler metadata, linker policy, and runtime hardening. A single bad executable-stack bit can change security posture, so a tiny utility remains useful even after prelink itself stopped being fashionable.
### 时间线
- 2001: The prelink archive begins publishing source snapshots.
- 2003: PT_GNU_STACK support is proposed for binutils.
- 2003: execstack documentation describes querying and changing PT_GNU_STACK markings.
- 2013: The prelink archive publishes a later source snapshot used by manual-page renderers.
### Related projects
- execstack is tied to prelink, GNU binutils, GCC .note.GNU-stack metadata, and ELF dynamic-linker hardening behavior.
### 来源
-
-
-
## 安全说明
narrow executable package without higher-risk signals.
- **Geiger 风险:** 绿色 / 低
- narrow executable package without higher-risk signals
## 其他软件包管理器记录
- Ubuntu apt - execstack - 0.0.20131005-1.1ubuntu1: normalized package name match | Ubuntu 24.04 LTS package indexes: execstack from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ELF GNU_STACK program header editing utility
- dnf - execstack - 0.5.0-33.fc45: normalized package name match | Fedora Rawhide package metadata: execstack from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Utility to set/clear/query executable stack bit
- zypper - execstack - 0.5.0-5.8: normalized package name match | openSUSE Tumbleweed package metadata: execstack from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Utility to set/clear/query executable stack bit | https://github.com/keszybz/prelink/archive
## Combined YAML source
View the package source record on GitHub. [combined/execstack.yml](https://github.com/mxcl/pkgdb/blob/main/combined/execstack.yml)
## 来源
- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph