include noexecstack hardening flag on Linux (astral-sh#1064)

Mark the stack memory as non-executable using the '-Wl,-z,noexecstack' flag on aarch64 and x86_64 linux platforms.

Other linux targets are cross-compiled, this flag is left off for the time being.

closes astral-sh#1061

Author: jjhelmus

cpython-unix/targets.yml

@@ -136,6 +136,9 @@ aarch64-unknown-linux-gnu:
     - '-mno-omit-leaf-frame-pointer'
     # Needed to prevent BOLT from crashing.
     - '-fdebug-default-version=4'
+  target_ldflags:
+    # Hardening
+    - '-Wl,-z,noexecstack'
   needs:
     - autoconf
     - bdb
@@ -585,6 +588,9 @@ x86_64-unknown-linux-gnu:
     - '-mno-omit-leaf-frame-pointer'
     # Needed to prevent BOLT from crashing.
     - '-fdebug-default-version=4'
+  target_ldflags:
+    # Hardening
+    - '-Wl,-z,noexecstack'
   needs:
     - autoconf
     - bdb
@@ -636,6 +642,9 @@ x86_64_v2-unknown-linux-gnu:
     - '-mno-omit-leaf-frame-pointer'
     # Needed to prevent BOLT from crashing.
     - '-fdebug-default-version=4'
+  target_ldflags:
+    # Hardening
+    - '-Wl,-z,noexecstack'
   needs:
     - autoconf
     - bdb
@@ -687,6 +696,9 @@ x86_64_v3-unknown-linux-gnu:
     - '-mno-omit-leaf-frame-pointer'
     # Needed to prevent BOLT from crashing.
     - '-fdebug-default-version=4'
+  target_ldflags:
+    # Hardening
+    - '-Wl,-z,noexecstack'
   needs:
     - autoconf
     - bdb
@@ -738,6 +750,9 @@ x86_64_v4-unknown-linux-gnu:
     - '-mno-omit-leaf-frame-pointer'
     # Needed to prevent BOLT from crashing.
     - '-fdebug-default-version=4'
+  target_ldflags:
+    # Hardening
+    - '-Wl,-z,noexecstack'
   needs:
     - autoconf
     - bdb
@@ -786,6 +801,9 @@ x86_64-unknown-linux-musl:
     # Enable frame pointers
     - '-fno-omit-frame-pointer'
     - '-mno-omit-leaf-frame-pointer'
+  target_ldflags:
+    # Hardening
+    - '-Wl,-z,noexecstack'
   needs:
     - autoconf
     - bdb
@@ -835,6 +853,9 @@ x86_64_v2-unknown-linux-musl:
     # Enable frame pointers
     - '-fno-omit-frame-pointer'
     - '-mno-omit-leaf-frame-pointer'
+  target_ldflags:
+    # Hardening
+    - '-Wl,-z,noexecstack'
   needs:
     - autoconf
     - bdb
@@ -884,6 +905,9 @@ x86_64_v3-unknown-linux-musl:
     # Enable frame pointers
     - '-fno-omit-frame-pointer'
     - '-mno-omit-leaf-frame-pointer'
+  target_ldflags:
+    # Hardening
+    - '-Wl,-z,noexecstack'
   needs:
     - autoconf
     - bdb
@@ -933,6 +957,9 @@ x86_64_v4-unknown-linux-musl:
     # Enable frame pointers
     - '-fno-omit-frame-pointer'
     - '-mno-omit-leaf-frame-pointer'
+  target_ldflags:
+    # Hardening
+    - '-Wl,-z,noexecstack'
   needs:
     - autoconf
     - bdb
@@ -985,6 +1012,9 @@ aarch64-unknown-linux-musl:
     # Enable frame pointers
     - '-fno-omit-frame-pointer'
     - '-mno-omit-leaf-frame-pointer'
+  target_ldflags:
+    # Hardening
+    - '-Wl,-z,noexecstack'
   needs:
     - autoconf
     - bdb