> But it will either fail if > kernel is set with non-executable stack,
eh no. mprotect with prot_exec is still supposed to work. The stacks still have MAY_EXEC attribute, just not the actual EXEC attribute [unhandled content-type:application/pgp-signature]