From bc6d394be4bf90f4a882fdd4d3dd8393be794f5c Mon Sep 17 00:00:00 2001
From: Gerd Hoffmann <kraxel@redhat.com>
Date: Fri, 22 Dec 2023 13:33:44 +0100
Subject: [PATCH] set PcdSetNxForStack = TRUE for strict nx builds

---
 edk2-build.fedora | 1 +
 1 file changed, 1 insertion(+)

diff --git a/edk2-build.fedora b/edk2-build.fedora
index 531d810..e5c635e 100644
--- a/edk2-build.fedora
+++ b/edk2-build.fedora
@@ -48,6 +48,7 @@ TPM2_CONFIG_ENABLE       = FALSE
 [pcds.nx.strict]
 PcdDxeNxMemoryProtectionPolicy = 0xC000000000007FD5
 PcdImageProtectionPolicy       = 0x03
+PcdSetNxForStack               = TRUE
 # Default is FALSE, so there no need to actually set it.
 #PcdUninstallMemAttrProtocol    = FALSE