SEGVGUARD in freeBSD

[Shawn Webb]

I forgot to mention that hardening.pax.segvguard.status is a sysctl
node. To set it:

sysctl hardening.pax.segvguard.status=2

Or in /etc/sysctl.conf:

hardening.pax.segvguard.status=2

Thanks,

Shawn

On Fri, Aug 04, 2017 at 08:46:46AM -0400, Shawn Webb wrote:
> After booting HardenedBSD, set hardening.pax.segvguard.status=2. No
> configuration is necessary.
> 
> Thanks,
> 
> Shawn
> 
> On Fri, Aug 04, 2017 at 05:15:51PM +0530, syed khalid wrote:
> > Hello Johannes/Shawn,
> > 
> > Thanks for the information. I would like to experiment SEGVGUARD and I
> > would like to monitor the performance of the kernel in the context of
> > SEGVGUARD enabled for a single application. How do i enable or configure
> > the SEGVGUARD service in HardenedBSD?
> > 
> > Regards,
> > Syed
> > 
> > On Thu, Aug 3, 2017 at 9:18 PM, Johannes Jost Meixner <
> > johannes at perceivon.net> wrote:
> > 
> > > You'll want to checkout HardenedBSD[1], especially the 10-STABLE builds
> > > [2].
> > >
> > >
> > > [1] https://www.hardenedbsd.org
> > > [2]
> > > http://jenkins.hardenedbsd.org/builds/HardenedBSD-10-STABLE-amd64-LATEST/
> > >
> > >
> > >
> > > Best regards,
> > >
> > > Johannes Meixner
> > >
> > >
> > > Perceivon O??
> > > Pikk 7-17
> > > 10123 Tallinn
> > >
> > > tel: +372 5855 1779
> > > web: http://www.perceivon.net
> > >
> > > On 08/03/2017 18:35, syed khalid wrote:
> > > > Hello All,
> > > >
> > > > I would like to configure SEGVGUARD for few critical applications in
> > > > FreeBSD10 . Is is available natively in FreeBSD10 ?
> > > >
> > > > If so you could anyone help me in enabling/configuring SEGVGUARD
> > > >
> > >
> > >
> > 
> > 
> > -- 
> > *Thanks & Regards*
> > *Syed Khalid M*
> > *Mobile No:+91-8148910714*
> 
> -- 
> Shawn Webb
> Cofounder and Security Engineer
> HardenedBSD
> 
> GPG Key ID:          0x6A84658F52456EEE
> GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89  3D9E 6A84 658F 5245 6EEE



-- 
Shawn Webb
Cofounder and Security Engineer
HardenedBSD

GPG Key ID:          0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89  3D9E 6A84 658F 5245 6EEE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-security/attachments/20170804/6fb9060b/attachment.sig>