mirror of
https://github.com/opnsense/src.git
synced 2026-06-09 08:43:19 -04:00
ec93b44059
On i386, the stack isn't randomized enough to provide enough space for the VDSO to be randomized. Bump the stack randomization up to 14 for 32bit systems and lower the VDSO randomization to 8. This provides enough of a difference between the two to allow for both stack and VDSO randomization. Note that ASLR on 32bit systems is still rather weak. Not much entropy can be introduced into the stack and VDSO. Brute forcing the stack and VDSO is well within the realm of possibility. Users are strongly advised to migrate to 64bit systems. Signed-off-by: Shawn Webb <shawn.webb@hardenedbsd.org> |
||
|---|---|---|
| .. | ||
| hbsd_pax_aslr.c | ||
| hbsd_pax_common.c | ||
| hbsd_pax_internal.h | ||
| hbsd_pax_log.c | ||