=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/33.html,v retrieving revision 1.9 retrieving revision 1.10 diff -u -r1.9 -r1.10 --- www/33.html 2003/03/25 23:48:46 1.9 +++ www/33.html 2003/03/25 23:49:38 1.10 @@ -80,11 +80,12 @@ enabled by default.

-

  • W^X (pronounced: "W xor X") binaries on ELF architectures. This is -a fine-grained memory permissions layout, ensuring that memory which can be -written to by application programs can not be executable at the same time -and vice versa. This raises the bar on potential buffer overflows and other -attacks. +
  • W^X (pronounced: "W xor X") binaries on architectures capable of +pure execute-bit support in the MMU (sparc, sparc64, alpha, +hppa). This is a fine-grained memory permissions layout, ensuring that +memory which can be written to by application programs can not be +executable at the same time and vice versa. This raises the bar on +potential buffer overflows and other attacks.

  • Still more reduction in setuid and setgid binaries, and more chroot @@ -364,7 +365,7 @@ alt="OpenBSD"> www@openbsd.org
    -$OpenBSD: 33.html,v 1.9 2003/03/25 23:48:46 henning Exp $ +$OpenBSD: 33.html,v 1.10 2003/03/25 23:49:38 deraadt Exp $