version 1.73, 2015/10/02 02:26:38 |
version 1.74, 2015/10/12 18:36:15 |
|
|
<li>Improved kernel checks of ELF headers. |
<li>Improved kernel checks of ELF headers. |
<li>Support for the NX (No-eXecute) bit on i386, resulting in much better W^X enforcement in userland for hardware that has this feature. |
<li>Support for the NX (No-eXecute) bit on i386, resulting in much better W^X enforcement in userland for hardware that has this feature. |
<li>Enforcement of W^X in the kernel address space on i386 when using processors with the NX bit. |
<li>Enforcement of W^X in the kernel address space on i386 when using processors with the NX bit. |
<li>Work started on a new process-containment facility called <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tame&sektion=2">tame(2)</a>. |
<li>Work started on a new process-containment facility called <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tame&sektion=2&manpath=OpenBSD-5.8">tame(2)</a>. |
</ul> |
</ul> |
<p> |
<p> |
|
|