=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/62.html,v retrieving revision 1.29 retrieving revision 1.30 diff -u -r1.29 -r1.30 --- www/62.html 2017/10/02 20:47:29 1.29 +++ www/62.html 2017/10/02 21:03:57 1.30 @@ -178,8 +178,8 @@ mail(1) were rewritten to cope with the removal.
  • Trapsleds, a new mitigation that significantly reduces the amount of - nops in the instruction stream, converting them to traps, eliminating - many potentially useful gadgets. + nops in the instruction stream, converting them to traps, making it + harder to target potential gadgets.
  • Kernel Address Randomized Link (KARL), a new "link-kit" allows the .o files of the kernel to be relinked in a random order, creating a unique kernel for each boot.