diff --git a/stand/kboot/kboot/arch/aarch64/tramp.S b/stand/kboot/kboot/arch/aarch64/tramp.S
--- a/stand/kboot/kboot/arch/aarch64/tramp.S
+++ b/stand/kboot/kboot/arch/aarch64/tramp.S
@@ -99,3 +99,5 @@
 	.globl	tramp_data_offset
 tramp_data_offset:
 	.long	trampoline_data-tramp
+
+	.section .note.GNU-stack,"",%progbits
diff --git a/stand/kboot/kboot/arch/amd64/amd64_tramp.S b/stand/kboot/kboot/arch/amd64/amd64_tramp.S
--- a/stand/kboot/kboot/arch/amd64/amd64_tramp.S
+++ b/stand/kboot/kboot/arch/amd64/amd64_tramp.S
@@ -105,3 +105,5 @@
 tramp_data_offset:
 	.long	trampoline_data-tramp
 	.size	tramp_data_offset, 4
+
+	.section .note.GNU-stack,"",%progbits
diff --git a/stand/kboot/kboot/arch/powerpc64/kerneltramp.S b/stand/kboot/kboot/arch/powerpc64/kerneltramp.S
--- a/stand/kboot/kboot/arch/powerpc64/kerneltramp.S
+++ b/stand/kboot/kboot/arch/powerpc64/kerneltramp.S
@@ -99,3 +99,5 @@
 	.data
 CNAME(szkerneltramp):
 	.long endkerneltramp - CNAME(kerneltramp)
+
+	.section .note.GNU-stack,"",%progbits
diff --git a/stand/kboot/libkboot/arch/aarch64/host_syscall.S b/stand/kboot/libkboot/arch/aarch64/host_syscall.S
--- a/stand/kboot/libkboot/arch/aarch64/host_syscall.S
+++ b/stand/kboot/libkboot/arch/aarch64/host_syscall.S
@@ -16,3 +16,5 @@
 	ret
 /* Note: We're exposing the raw return value to the caller */
 END(host_syscall)
+
+	.section .note.GNU-stack,"",%progbits
diff --git a/stand/kboot/libkboot/arch/amd64/host_syscall.S b/stand/kboot/libkboot/arch/amd64/host_syscall.S
--- a/stand/kboot/libkboot/arch/amd64/host_syscall.S
+++ b/stand/kboot/libkboot/arch/amd64/host_syscall.S
@@ -27,3 +27,5 @@
 	ret
 /* Note: We're exposing the raw return value to the caller */
 END(host_syscall)
+
+	.section .note.GNU-stack,"",%progbits
diff --git a/stand/kboot/libkboot/arch/powerpc64/host_syscall.S b/stand/kboot/libkboot/arch/powerpc64/host_syscall.S
--- a/stand/kboot/libkboot/arch/powerpc64/host_syscall.S
+++ b/stand/kboot/libkboot/arch/powerpc64/host_syscall.S
@@ -30,3 +30,5 @@
 	blr
 /* Note: We're exposing the raw return value to the caller */	
 END(host_syscall)
+
+	.section .note.GNU-stack,"",%progbits