version 1.69, 2015/09/30 13:12:12 |
version 1.70, 2015/09/30 13:23:15 |
|
|
<li>Static PIE support for sparc. |
<li>Static PIE support for sparc. |
<li>Alpha switched to secure PLT. |
<li>Alpha switched to secure PLT. |
<li>Improved kernel checks of ELF headers. |
<li>Improved kernel checks of ELF headers. |
<li>Stricter enforcement of W^X in the kernel address space on i386 when using processors with PAE support |
<li>Support for the NX (No-eXecute) bit on i386, resulting in much better W^X enforcement in userland for hardware that has this feature. |
|
<li>Enforcement of W^X in the kernel address space on i386 when using processors with the NX bit. |
<li>Work started on a new process-containment facility called <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tame&sektion=2">tame(2)</a>. |
<li>Work started on a new process-containment facility called <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tame&sektion=2">tame(2)</a>. |
</ul> |
</ul> |
<p> |
<p> |