Date: Wed, 9 Mar 2016 17:23:12 -0500 From: Shawn Webb <shawn.webb@hardenedbsd.org> To: Brett Glass <brett@lariat.net> Cc: Piotr Kubaj <pkubaj@anongoth.pl>, freebsd-security@freebsd.org Subject: Re: Will 11.0-RELEASE include ASLR? Message-ID: <20160309222312.GD42303@mutt-hardenedbsd> In-Reply-To: <201603091722.KAA24139@mail.lariat.net> References: <56E02D95.9020303@anongoth.pl> <201603091722.KAA24139@mail.lariat.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--hoZxPH4CaxYzWscb Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Mar 09, 2016 at 10:21:42AM -0700, Brett Glass wrote: > ASLR is controversial. Some see it as "security by obscurity;" others see > it as extremely useful and effective. >=20 > Yes, I would like it as a kernel build option, so that I can choose to > optimize for raw speed (e.g. on a server which is hardened in other ways) > or for the extra warm fuzzies that ASLR provides. The great thing is that our implementation comes as a kernel build option, just like you want. Our implementation also works on a per-jail basis. Thanks, --=20 Shawn Webb HardenedBSD GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE --hoZxPH4CaxYzWscb Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJW4KJOAAoJEGqEZY9SRW7u20sP/jYqalzbyiQtCqSl2SR7leq9 Cdu134/qX/fnddtWaUYani9XuaPZPs8Qfi+ZlWN/WZ2CZcXR3/PIpQPvg37rqUXG Cql9WwZjJqqn884RZb08KHBsduVZF81r4SJZCIFSZyvm7+EBz1FJlVS2Tsrz42by W5YsSi0KfzHhdsy88l6WAfwUB70kVQSWLwXse2HkQVG4MnmBhUDeLMaezHUdZWEJ PCYjWiuuOOO9uMalCz+2bwzbcQzVLuvT5W69Q90ENE+bJelC2WkAAJtknXhGdJoR tcCPbX1IyXEupLweM5w0FHKNzYs88Kh2xoRdcx12M0QXu+9TmAiOpFa1zb+PazEC kVLVQliY+uirQkf1H/4jwNAGB+bKeoGCdC/B4JUqVgfAw+1K9EZvrmMTPjYU3YFk /xaNL1j2638c4elt7rtm57XF4SGGzgEGWguXo/bWt+8FYp2pT+w6hOHY0SyN/dw+ m296z1UELZC/vG4MLiH88Bidbm97Ft1BUErt2fjo4wOc7iQyP0QxSWGUGvgt1/ad Q6I9pDDsm6TE5w8C1jSRgAd2xx2WebX1WOaZHkrAAsBhXKFzhxZux0yEVqDh183v KYm9f6qaDx09PFepU94lS3aM4vdNmheaD1wuyyzlq3orJb9vwNtg9kIDYSenqdSV BsRzBkEifXp1QNXct30a =jGpJ -----END PGP SIGNATURE----- --hoZxPH4CaxYzWscb--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160309222312.GD42303>