In order to make more of the ecosystem of EFI applications that shim can chainload be marked as supporting NX I think it's worth changing post-process-pe to be installed into the filesystem.
Distro packagers can then put into a package that uses as a build dependency for things like GRUB or fwupd-efi. Alternatively, it's going to mean all the downstream projects will need to manually modify the headers as part of their build process to indicate NX compatibility.
In order to make more of the ecosystem of EFI applications that shim can chainload be marked as supporting NX I think it's worth changing
post-process-pe
to be installed into the filesystem.Distro packagers can then put into a package that uses as a build dependency for things like GRUB or fwupd-efi. Alternatively, it's going to mean all the downstream projects will need to manually modify the headers as part of their build process to indicate NX compatibility.