version 1.28, 2017/03/11 02:58:21 |
version 1.29, 2017/03/11 03:43:55 |
|
|
<li>Security improvements: |
<li>Security improvements: |
<ul> |
<ul> |
<li>Enforcement of userland W^X on OCTEON Plus and later. |
<li>Enforcement of userland W^X on OCTEON Plus and later. |
|
<li>All shared libraries and all dynamic and static-PIE executables use |
|
the RELRO ("read-only after relocation") design such that |
|
more of the initial data can be protected as read-only. |
<li>The size of user virtual address space has been increased |
<li>The size of user virtual address space has been increased |
from 2GB to 1TB on mips64. |
from 2GB to 1TB on mips64. |
<li>PIE and -static -pie on arm (XXX someone please explain this better). |
<li>PIE and -static -pie on arm (XXX someone please explain this better). |