upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-05-14 01:59:44 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

HBSD: Enable SEGVGUARD by default

Browse source 
HardenedBSD still has SEGVGUARD in opt-in mode by default. OPNsense
needs to have this as opt-out by default.

Signed-off-by:	Shawn Webb <shawn@opnsense.org>
This commit is contained in:
Shawn Webb 2018-11-04 18:35:44 -05:00
parent 4b21e5691f
commit 33bc3d9fd9
No known key found for this signature in database
GPG key ID: 411DCD7D5C3BFCB6
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
sys/hardenedbsd/hbsd_pax_segvguard.c
View file

@ -62,7 +62,7 @@ __FBSDID("$FreeBSD$");
FEATURE(hbsd_segvguard, "Segmentation fault protection.");
#ifdef PAX_HARDENING
static int pax_segvguard_status = PAX_FEATURE_OPTIN; /* XXXOP */
static int pax_segvguard_status = PAX_FEATURE_OPTOUT; /* XXXOP */
#else
static int pax_segvguard_status = PAX_FEATURE_OPTIN;
#endif