mirror of
https://github.com/opnsense/src.git
synced 2026-06-09 08:43:19 -04:00
e13c0d42eb
On OPNsense's 16.7 roadmap is HardenedBSD's ASLR code. This commit separates out the ASLR code from the rest of our exploit mitigation and system hardening code. Testing and verification still need to be performed. Initial testing (compile + boot + `procstat -v PIDofPIEapplication) has been performed. More thorough testing should occur. Shared object load order randomization in the RTLD is not included in this patch. That will be discussed with the fine folks at OPNsense at a later time. Since OPNsense is based on FreeBSD 10.x, this patch will need to be backported to 10-STABLE. However, a "horizontal port" to 11-CURRENT, which is what this commit is, needed to be done first. Signed-off-by: Shawn Webb <shawn.webb@hardenedbsd.org> |
||
|---|---|---|
| .. | ||
| allwinner | ||
| arm | ||
| at91 | ||
| broadcom/bcm2835 | ||
| cavium/cns11xx | ||
| conf | ||
| freescale | ||
| include | ||
| lpc | ||
| mv | ||
| rockchip | ||
| samsung | ||
| ti | ||
| versatile | ||
| xilinx | ||
| xscale | ||