upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-09 08:43:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
opnsense-src/sys/amd64
History
Shawn Webb f4ad62ed52 Introduce HardenedBSD's procfs hardening. 
OPNsense doesn't use procfs by default, but in case users try to use it,
prevent an interesting attack where an attacker can abuse procfs to
modify application execution state.

This commit also introduces the PAX_HARDENING kernel option.

Signed-off-by:	Shawn Webb <shawn@opnsense.org>

(cherry picked from commit 654d6151ef)
(cherry picked from commit 77492e5bdb)
(cherry picked from commit c506eb78e2)
(cherry picked from commit dbbb6b841f)
2017-02-16 16:50:16 +01:00
..
acpica src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
amd64 Revised SA-16:15. The initial patch didn't cover all possible overflows 2016-10-25 20:23:11 +02:00
cloudabi64 src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
conf Introduce HardenedBSD's procfs hardening. 2017-02-16 16:50:16 +01:00
ia32 Initial import of HardenedBSD ASLR complete. 2016-10-10 01:53:29 -04:00
include Initial import of HardenedBSD ASLR complete. 2016-10-10 01:53:29 -04:00
linux Initial import of HardenedBSD ASLR complete. 2016-10-10 01:53:29 -04:00
linux32 Initial import of HardenedBSD ASLR complete. 2016-10-10 01:53:29 -04:00
pci src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
vmm src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
Makefile src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00