If you build for the host architecture you can completely disable ifunc without ...

		afh1 on April 13, 2024 \| parent \| context \| favorite \| on: XZ backdoor story – Initial analysis If you build for the host architecture you can completely disable ifunc without losing anything. In Gentoo it is common to build with -march=native, and disabling ifunc is as simple as setting -multiarch in glibc's USE flags. I've seen no negative impact from it.

goodie! more, and less-controlled build environments to compromise, what could possibly go wrong?