===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/58.html,v
retrieving revision 1.69
retrieving revision 1.70
diff -u -r1.69 -r1.70
--- www/58.html 2015/09/30 13:12:12 1.69
+++ www/58.html 2015/09/30 13:23:15 1.70
@@ -145,7 +145,8 @@
Static PIE support for sparc.
Alpha switched to secure PLT.
Improved kernel checks of ELF headers.
- Stricter enforcement of W^X in the kernel address space on i386 when using processors with PAE support
+ Support for the NX (No-eXecute) bit on i386, resulting in much better W^X enforcement in userland for hardware that has this feature.
+ Enforcement of W^X in the kernel address space on i386 when using processors with the NX bit.
Work started on a new process-containment facility called tame(2).