=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/58.html,v retrieving revision 1.73 retrieving revision 1.74 diff -c -r1.73 -r1.74 *** www/58.html 2015/10/02 02:26:38 1.73 --- www/58.html 2015/10/12 18:36:15 1.74 *************** *** 147,153 ****
  • Improved kernel checks of ELF headers.
  • Support for the NX (No-eXecute) bit on i386, resulting in much better W^X enforcement in userland for hardware that has this feature.
  • Enforcement of W^X in the kernel address space on i386 when using processors with the NX bit. !
  • Work started on a new process-containment facility called tame(2).

    --- 147,153 ----

  • Improved kernel checks of ELF headers.
  • Support for the NX (No-eXecute) bit on i386, resulting in much better W^X enforcement in userland for hardware that has this feature.
  • Enforcement of W^X in the kernel address space on i386 when using processors with the NX bit. !
  • Work started on a new process-containment facility called tame(2).