version 1.19, 2016/07/22 20:30:32 |
version 1.20, 2016/07/22 20:31:34 |
|
|
<li><a href="http://man.openbsd.org/sigreturn.2">sigreturn(2)</a> |
<li><a href="http://man.openbsd.org/sigreturn.2">sigreturn(2)</a> |
can now only be used by the kernel-provided signal trampoline, |
can now only be used by the kernel-provided signal trampoline, |
with a cookie to detect attempts to reuse it. |
with a cookie to detect attempts to reuse it. |
<li>To deter ROP exploits, in <a href="http://man.openbsd.org/rc.8">rc(8)</a>, |
<li>To deter code reuse exploits, in <a href="http://man.openbsd.org/rc.8">rc(8)</a>, |
re-link libc.so on startup, placing the objects in a random order. |
re-link libc.so on startup, placing the objects in a random order. |
<li>In the <a href="http://man.openbsd.org/getpwnam.3">getpwnam(3)</a> |
<li>In the <a href="http://man.openbsd.org/getpwnam.3">getpwnam(3)</a> |
family of functions, stop opening the shadow database by default. |
family of functions, stop opening the shadow database by default. |