version 1.52, 2017/07/09 09:46:47 |
version 1.53, 2017/10/09 16:02:38 |
|
|
<a href="http://www.cs.vu.nl/~herbertb/papers/srop_sp14.pdf">Eric Bosman</a> |
<a href="http://www.cs.vu.nl/~herbertb/papers/srop_sp14.pdf">Eric Bosman</a> |
and Herbert Bos in 2014, implemented by Theo de Raadt in May 2016, |
and Herbert Bos in 2014, implemented by Theo de Raadt in May 2016, |
enabled by default since OpenBSD 6.0. |
enabled by default since OpenBSD 6.0. |
<li>C library order randomization: |
<li>Library order randomization: |
In <a href="https://man.openbsd.org/rc.8">rc(8)</a>, re-link |
In <a href="https://man.openbsd.org/rc.8">rc(8)</a>, re-link |
<code>libc.so</code> on startup, placing the objects in a random order. |
<code>libc.so</code>, <code>libcrypto</code>, and <code>ld.so</code> |
|
on startup, placing the objects in a random order. |
Theo de Raadt and Robert Peichaer, May 2016, |
Theo de Raadt and Robert Peichaer, May 2016, |
enabled by default since OpenBSD 6.0. |
enabled by default since OpenBSD 6.0 and 6.2. |
<li>Kernel-assisted lazy-binding for W^X safety in multi-threaded programs. |
<li>Kernel-assisted lazy-binding for W^X safety in multi-threaded programs. |
A new syscall <a href="https://man.openbsd.org/kbind.2">kbind(2)</a> |
A new syscall <a href="https://man.openbsd.org/kbind.2">kbind(2)</a> |
permits lazy-binding to be W^X safe in multi-threaded programs. |
permits lazy-binding to be W^X safe in multi-threaded programs. |