[CFT] ASLR, PIE, and segvguard on 11-current and 10-stable

Oliver Pinter oliver.pntr at gmail.com
Sun May 25 20:31:37 UTC 2014


On 5/25/14, Dag-Erling Smørgrav <des at des.no> wrote:
> Oliver Pinter <oliver.pntr at gmail.com> writes:
>> pax_log will be in future a generic pax related logging framework,
>> with ratelimiting and other features.  It will log user, IP, binary
>> name, path, checksum, and others.
>
> What are you using this for?  Are you sure you can't use ktrace?  It's a
> lot more flexible and powerful than you probably realize.

Logging to system log, The feature will similar to this in grsecurity:
http://en.wikibooks.org/wiki/Grsecurity/Appendix/Grsecurity_and_PaX_Configuration_Options#Kernel_Auditing

>
> DES
> --
> Dag-Erling Smørgrav - des at des.no
>


More information about the freebsd-stable mailing list