From owner-freebsd-stable@FreeBSD.ORG Sat Jun 28 15:22:14 2014 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 9294F30A; Sat, 28 Jun 2014 15:22:14 +0000 (UTC) Received: from mail-qc0-x244.google.com (mail-qc0-x244.google.com [IPv6:2607:f8b0:400d:c01::244]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 407F92F0D; Sat, 28 Jun 2014 15:22:14 +0000 (UTC) Received: by mail-qc0-f196.google.com with SMTP id c9so1852094qcz.7 for ; Sat, 28 Jun 2014 08:22:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:subject:message-id:mime-version:content-type :content-disposition:user-agent; bh=5jl4Fb8vSXLEYcC42vwb+qNrf/u8kurl2LCvjUGgoz8=; b=inwzX6JZ01j1vVakNaUm/jyEcGy2EbyHtBOSqm/sQmQ7Nf5Yj4tccdB6b6l04rSdgv iaUI88FMcDZ2UpvykSLB5WOCjyf6ZsVbwocVTqFws2b/6xu8voxM2hszb9DpQNQ5Guph KybroX4HDRPixRJRSThIMXOTVzyKLWF+sG5EyShUH46G/PV01ZAHb7nwrGtyQxf4RX7J uAyY6YpuvOmYEUPDRDH/5wO8ihb0C4ayZfjBHMinopIUbNRWPHs5IPzEhAT25cSd/oqT QrcJKM+Uk1z30YsrorGT4U9MxfQ7t/SptIkzNTCqHexSEy67L3tUUajeCkVZM6nRlhW9 qN0g== X-Received: by 10.224.120.193 with SMTP id e1mr2698290qar.42.1403968933406; Sat, 28 Jun 2014 08:22:13 -0700 (PDT) Received: from pwnie.vrt.sourcefire.com (moist.vrt.sourcefire.com. [198.148.79.134]) by mx.google.com with ESMTPSA id y4sm22166008qad.14.2014.06.28.08.22.12 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 28 Jun 2014 08:22:12 -0700 (PDT) Date: Sat, 28 Jun 2014 11:22:10 -0400 From: Shawn Webb To: freebsd-stable@freebsd.org, freebsd-hackers@freebsd.org Subject: ASLR Patches For 10-STABLE Message-ID: <20140628152210.GA4365@pwnie.vrt.sourcefire.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="gBBFr7Ir9EOA20Yy" Content-Disposition: inline X-PGP-Key: http://pgp.mit.edu/pks/lookup?op=vindex&search=0x6A84658F52456EEE User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 28 Jun 2014 15:22:14 -0000 --gBBFr7Ir9EOA20Yy Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Hey All, You can find the new ASLR patch for 10-STABLE here: http://0xfeedface.org/~shawn/patches/2014-06-28_aslr_10-stable.patch Here's what's changed since our last our of patches on 24 May 2014: Shawn Webb: Sat Jun 28 09:57:19 2014 -0400: PAX ASLR: Move the mmap randomization to a better spot as suggested by Alan Cox Fri Jun 27 09:26:18 2014 -0400: PAX ASLR: Remove erroneous line of code Sat Jun 21 20:03:07 2014 -0400: PAX SEGVGUARD: Remove segvguard prior to putting in a separate feature branch Thu Jun 19 21:08:37 2014 -0400: PAX ASLR: More style(9) fixes Thu Jun 19 20:59:44 2014 -0400: PAX ASLR: Add PAX_SYSCTLS to sys/conf/NOTES Thu Jun 19 20:48:42 2014 -0400: PAX ASLR: Remove extra NO_PIE/MK_PIE entries that aren't now needed Wed Jun 11 22:07:51 2014 -0400: PAX ASLR: Rollback code cleanup that removed orig_addr from pax_aslr_mmap(). Wed Jun 11 17:54:12 2014 -0400: PAX ASLR: style(9) changes. Grammar fixes. Code cleanup. Fri May 30 18:36:49 2014 -0400: PAX ASLR: Pull in Oliver Pinter's change to add stack randomization Fri May 30 18:36:01 2014 -0400: Update copyright Oliver Pinter: Wed Jun 4 09:39:48 2014 +0200: PAX ASLR: added FEATURE(aslr, ...) to the kernel, and modify ugidfw to use them Wed May 28 00:27:06 2014 +0200: PAX: fix prison0 initialization after my jail modifications Sun May 25 21:20:23 2014 +0200: PAX: show pax settings in dmesg, and validate some value Sun May 25 19:48:44 2014 +0200: PAX ASLR: make security.pax.aslr sysctls optional Sun May 25 19:15:16 2014 +0200: PAX: check proc->p_ucred Sun May 25 19:11:50 2014 +0200: PAX: added PAX_SYSCTLS kernel option Sun May 25 19:10:16 2014 +0200: PAX ASLR: simplify jail handling Sun May 25 19:00:12 2014 +0200: PAX: hook in pax_init_prison at kern_jail_set Thanks, Shawn --gBBFr7Ir9EOA20Yy Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBAgAGBQJTrt2iAAoJEGqEZY9SRW7u9rMQALopVTMxnLSmIGI4P37h/04E 5XshZvgRieftIUo6YoyzTaPg5vQuZpwVufLvd8swXihhFXM8nXVaD9vgF0NDDw4O PxsAuKsMOhB1ZWxFrFzbUMZJf81LfeghiPq25AGjU+Wd7Z7fmB4GdQLSyENDUJZX QUB+MuS7FMGxETuy5DoTehfMNtP8h7vJyflrkYrW4rxdEfT5iIvGsirpPZa9fHCW tPxX9IsIXLH7rsRhHuXaSnvGHL2zeL2Zg/YVhEEhnmjQNeIUZE+hIpepta7uJ43b pab0M7FwFc+U0agf+ivMCjv3OJktK1ZJcO75EsF789rsdSiRXdGj7KM1fdp4Ynv2 O1IQhniYQkc8l9g7bFYVcb3sLmPxqWWn5AAYHdw5vcTnsTZ6doomApBRvofymoXu APNXtKwjzlYLRAzv0LQJV2z+IcqUmiTd2hDg0CYqVUXXqtfNQ9weBRgFDOeNLgCV d/REENZoMMq0xt6HdRPVEjLgiRfasydVOHta8S8TT0Ji6rcnkFbY3Ja6PpXN40np b07RJB0qh3q6Iugxt258/8duj5g+EnHc//0B/Ih1ZONTgVWZxn9lgg+M6f9Wws0l cYpUatkKMHvq+/B73o6hBWLwkJyymmbVeTUMYwd+8NSa85MMasXEbA/wcoPa3wZo RZbGEtj1LVC1U4PU2pJH =qPWI -----END PGP SIGNATURE----- --gBBFr7Ir9EOA20Yy--