===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/58.html,v
retrieving revision 1.69
retrieving revision 1.70
diff -c -r1.69 -r1.70
*** www/58.html 2015/09/30 13:12:12 1.69
--- www/58.html 2015/09/30 13:23:15 1.70
***************
*** 145,151 ****
Static PIE support for sparc.
Alpha switched to secure PLT.
Improved kernel checks of ELF headers.
! Stricter enforcement of W^X in the kernel address space on i386 when using processors with PAE support
Work started on a new process-containment facility called tame(2).
--- 145,152 ----
Static PIE support for sparc.
Alpha switched to secure PLT.
Improved kernel checks of ELF headers.
! Support for the NX (No-eXecute) bit on i386, resulting in much better W^X enforcement in userland for hardware that has this feature.
! Enforcement of W^X in the kernel address space on i386 when using processors with the NX bit.
Work started on a new process-containment facility called tame(2).