=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/33.html,v retrieving revision 1.9 retrieving revision 1.10 diff -c -r1.9 -r1.10 *** www/33.html 2003/03/25 23:48:46 1.9 --- www/33.html 2003/03/25 23:49:38 1.10 *************** *** 80,90 **** enabled by default.

!

  • W^X (pronounced: "W xor X") binaries on ELF architectures. This is ! a fine-grained memory permissions layout, ensuring that memory which can be ! written to by application programs can not be executable at the same time ! and vice versa. This raises the bar on potential buffer overflows and other ! attacks.

  • Still more reduction in setuid and setgid binaries, and more chroot --- 80,91 ---- enabled by default.

    !

  • W^X (pronounced: "W xor X") binaries on architectures capable of ! pure execute-bit support in the MMU (sparc, sparc64, alpha, ! hppa). This is a fine-grained memory permissions layout, ensuring that ! memory which can be written to by application programs can not be ! executable at the same time and vice versa. This raises the bar on ! potential buffer overflows and other attacks.

  • Still more reduction in setuid and setgid binaries, and more chroot *************** *** 364,370 **** alt="OpenBSD"> www@openbsd.org
    ! $OpenBSD: 33.html,v 1.9 2003/03/25 23:48:46 henning Exp $ --- 365,371 ---- alt="OpenBSD"> www@openbsd.org
    ! $OpenBSD: 33.html,v 1.10 2003/03/25 23:49:38 deraadt Exp $