From owner-freebsd-current@FreeBSD.ORG Thu Apr 16 08:45:59 2015 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id A323D1CA for ; Thu, 16 Apr 2015 08:45:59 +0000 (UTC) Received: from mail-qk0-f179.google.com (mail-qk0-f179.google.com [209.85.220.179]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5B7EF627 for ; Thu, 16 Apr 2015 08:45:58 +0000 (UTC) Received: by qkx62 with SMTP id 62so124922716qkx.0 for ; Thu, 16 Apr 2015 01:45:52 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:organization :user-agent:mime-version:content-type; bh=/uqe0gc0Xk032LoWbYnEZHDGRMPy6oxjfHhoKAIpkcs=; b=MHSoKeb00/MUFdk3nljLlXkIhujFxAHpARZx1bLQOVj1JoNZbXvaLaXYo43PCPOj9S /kEK170pOOtnhTDgvIyfr7beDvFVZ7pOBVihAPVEExUUw+An6WL3MzwPX7tBBXBAuNMw d43m+4tvf7sAAAZIaPxF5Tb5WwgNDIhfZIbTSvy3VYjZ534d2KceZidYSzYsSxDWUvps 3DGgkoAXUaBk82bRz1DDaTh5eltYXWZpuGFmmM+e66Qwi1YNXuXY1q8cyfXpNI0A2Sjs 0arXSwZioAo4jwlELwxooe0Mdh4veBF4k/0g2iBbC0ZbP4v1oZkAvvPxIC9VsgTqMmKP 1UXQ== X-Gm-Message-State: ALoCoQk/VNKPam1YCm9fp5k/Y8jwAo6S4TzJFEcP3ZjZLE9m18IdLfhiRh63K0Mf5CchfCQx9iGYRdnd0/Dtgsxvjzi9rEswTL12dJgYb3sZ7c3v3mQk2eAdRitFr2qQmI5TzKyNSAZV6x3CLwqcdMKjhvEyFsUumPt4xGFzjTStOeheZlCekqZDi4hO7owUpvEc6vFCygRa X-Received: by 10.55.16.140 with SMTP id 12mr58904516qkq.39.1429173500791; Thu, 16 Apr 2015 01:38:20 -0700 (PDT) Received: from shawnwebb-laptop.localnet (c-73-173-99-185.hsd1.md.comcast.net. [73.173.99.185]) by mx.google.com with ESMTPSA id e110sm5145265qga.13.2015.04.16.01.38.19 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 16 Apr 2015 01:38:19 -0700 (PDT) From: Shawn Webb To: freebsd-current@freebsd.org Subject: [CFT] FreeBSD ASLR Patch Date: Thu, 16 Apr 2015 04:38:10 -0400 Message-ID: <29176266.1eKrinu7bf@shawnwebb-laptop> Organization: HardenedBSD User-Agent: KMail/4.14.3 (FreeBSD/11.0-CURRENT; KDE/4.14.3; amd64; ; ) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart3740984.YOyZoJY7hI"; micalg="pgp-sha256"; protocol="application/pgp-signature" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2015 08:45:59 -0000 --nextPart3740984.YOyZoJY7hI Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="us-ascii" Hey All, I just updated the ASLR patch to FreeBSD (link below). If anyone is int= erested=20 in testing the patch out, please give it a whirl. It has been a while s= ince we=20 last did a call for testing, so there's a lot of changes (too many to r= eally=20 list). We've vastly improved performance and stability and have resolve= d the=20 vast majority of the concerns the FreeBSD team has had. If you're at all interested in security and/or exploit mitigation techn= iques,=20 I ask for your assistance in testing the patch. I want to thank all tho= se who=20 have tested in the past and have given us helpful suggestions on how to= =20 improve our hard work. The patch is on Phabricator: https://reviews.freebsd.org/D473 Thanks, =2D-=20 Shawn Webb HardenedBSD GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE --nextPart3740984.YOyZoJY7hI Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABCAAGBQJVL3TyAAoJEGqEZY9SRW7ue9cP/0P/yoD8jKbhevvgaix0X3R8 pFAaCu7M9J+rilg9HROTGr4kv8cr0xFoirfhqWCNUB6qU6q3BJ0JbN094rNxz63K AidAMRcrpHGnwbxFox1zrNSB8YNsre1tXIooSS5RNOca3szcbdUV1AVnfXZW1poc LJBuks+qptJcbsHN6sATSICj/2YRtVCTWenR0p6DX3qaEWZ45sLAGlsGwW4XJeqW vkn2V8PY+hWMqm5TETqcWOPX0U5JfmPnJ3d4Xkq9oYRFyyCfZKBxKyuy4e9+X/yi 3CGwvCO8Q6gIj37JJ5rDpHWnAAVdHDyBPEfB5g0gqNVqvOOPaAAxB/Gsmz3lxVBZ 6xoUoFxGKY6SP68HsTYIFweQqfLnzQBIIAcHT9H3dkiGz2bYnSXuDXa93Zz3Zw0s ke2aAjGPCE5x/jJxKXLmE6Th+Z/gdMivIeoS69hPW58Gw0NL8yLM5c+4dTgLCuBx peWyz6zjsdUSDPo4+x+kfMZnNd3AzzydeoWSbLq+qop2Si4UV7O3Y98XN5LqPV4l KhgmWloqCg29XT9ur2LAbvbjyoVZ0Ew+7+I8zJEIlDf8HXqeUTG0CMm1OfIFCLTx cKCoozbrUKic7vPOanjvHRyJJ+KfDic9t8lqt/769Pf09nDtkgtIJPJ5/exldeF2 Pq5czYUs2/DRd9VyLWwg =Lymv -----END PGP SIGNATURE----- --nextPart3740984.YOyZoJY7hI--