git: 3069b3f61dec - stable/13 - security.7: Minor fixes for ASLR sysctl descriptions
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 16 Feb 2022 17:59:18 UTC
The branch stable/13 has been updated by markj: URL: https://cgit.FreeBSD.org/src/commit/?id=3069b3f61deca44a1a4fbffa07676dbc852612fd commit 3069b3f61deca44a1a4fbffa07676dbc852612fd Author: Mark Johnston <markj@FreeBSD.org> AuthorDate: 2022-01-17 16:44:01 +0000 Commit: Mark Johnston <markj@FreeBSD.org> CommitDate: 2022-02-16 16:56:09 +0000 security.7: Minor fixes for ASLR sysctl descriptions Reviewed by: debdrup, danfe, emaste Sponsored by: The FreeBSD Foundation (cherry picked from commit 2188152717376fed1e6016187427666bb06cf33a) --- share/man/man7/security.7 | 27 +++++++++++++-------------- 1 file changed, 13 insertions(+), 14 deletions(-) diff --git a/share/man/man7/security.7 b/share/man/man7/security.7 index 1bb5338e54e6..0ebc61cfbd5c 100644 --- a/share/man/man7/security.7 +++ b/share/man/man7/security.7 @@ -1050,15 +1050,14 @@ instructions do not incur serialization overhead for shared buffer accesses, and do not serialize off-core memory accessses. .It Dv kern.elf32.aslr.enable Controls system-global Address Space Layout Randomization (ASLR) for -normal non-PIE (Position Independent Executable) 32bit binaries. -See also +normal non-PIE (Position Independent Executable) 32-bit ELF binaries. +See also the .Xr proccontrol 1 -mode -.Dv aslr , -also affected by the per-image control note flag. +.Dv aslr +mode, also affected by the per-image control note flag. .It Dv kern.elf32.aslr.pie_enable Controls system-global Address Space Layout Randomization for -position-independent (PIE) 32bit binaries. +position-independent (PIE) 32-bit binaries. .It Dv kern.elf32.aslr.honor_sbrk Makes ASLR less aggressive and more compatible with old binaries relying on the sbrk area. @@ -1068,24 +1067,24 @@ of the stack. Otherwise, the stack is mapped at a fixed location determined by the process ABI. .It Dv kern.elf64.aslr.enable -64bit binaries ASLR control. +ASLR control for 64-bit ELF binaries. .It Dv kern.elf64.aslr.pie_enable -64bit PIE binaries ASLR control. +ASLR control for 64-bit ELF PIEs. .It Dv kern.elf64.aslr.honor_sbrk -64bit binaries ASLR sbrk compatibility control. +ASLR sbrk compatibility control for 64-bit binaries. .It Dv kern.elf64.aslr.stack -Controls stack address randomization for 64bit binaries. +Controls stack address randomization for 64-bit binaries. .It Dv kern.elf32.nxstack -Enables non-executable stack for 32bit processes. +Enables non-executable stack for 32-bit processes. Enabled by default if supported by hardware and corresponding binary. .It Dv kern.elf64.nxstack -Enables non-executable stack for 64bit processes. +Enables non-executable stack for 64-bit processes. .It Dv kern.elf32.allow_wx Enables mapping of simultaneously writable and executable pages for -32bit processes. +32-bit processes. .It Dv kern.elf64.allow_wx Enables mapping of simultaneously writable and executable pages for -64bit processes. +64-bit processes. .El .Sh SEE ALSO .Xr chflags 1 ,