=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/58.html,v retrieving revision 1.69 retrieving revision 1.70 diff -c -r1.69 -r1.70 *** www/58.html 2015/09/30 13:12:12 1.69 --- www/58.html 2015/09/30 13:23:15 1.70 *************** *** 145,151 ****
  • Static PIE support for sparc.
  • Alpha switched to secure PLT.
  • Improved kernel checks of ELF headers. !
  • Stricter enforcement of W^X in the kernel address space on i386 when using processors with PAE support
  • Work started on a new process-containment facility called tame(2).

    --- 145,152 ----

  • Static PIE support for sparc.
  • Alpha switched to secure PLT.
  • Improved kernel checks of ELF headers. !
  • Support for the NX (No-eXecute) bit on i386, resulting in much better W^X enforcement in userland for hardware that has this feature. !
  • Enforcement of W^X in the kernel address space on i386 when using processors with the NX bit.
  • Work started on a new process-containment facility called tame(2).