stack_guard hardening bsdinstall option in STABLE and 11.1

Glen Barber gjb at FreeBSD.org
Mon Jul 17 13:34:02 UTC 2017


On Mon, Jul 17, 2017 at 11:54:06AM +0200, Vlad K. wrote:
> Hello list,
> 
> the stack_guard hardening option in bsdinstall is now setting 512 pages of
> it in CURRENT, as of r320674. It's said to MFC after 1 day (on Jul 5th), but
> STABLE hasn't got it yet. Is this simply an omission (understandable as the
> RELEASE is being prepared so things are a bit hectic I guess), or is there
> another reason?
> 
> Can we assume that in 11.1 the sysctl is integer and can we safely set >1
> number of pages, say 512 like the installer in CURRENT suggests?
> 

No, this is not available in the 11.1 installer.

Glen

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20170717/961dc30c/attachment.sig>


More information about the freebsd-stable mailing list