From owner-freebsd-security@freebsd.org  Thu Mar 10 05:24:00 2016
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 46DECACAFB8
 for <freebsd-security@mailman.ysv.freebsd.org>;
 Thu, 10 Mar 2016 05:24:00 +0000 (UTC)
 (envelope-from brett@lariat.org)
Received: from mail.lariat.net (mail.lariat.net [66.62.230.51])
 by mx1.freebsd.org (Postfix) with ESMTP id 00623273
 for <freebsd-security@freebsd.org>; Thu, 10 Mar 2016 05:23:59 +0000 (UTC)
 (envelope-from brett@lariat.org)
Received: from Toshi.lariat.org (IDENT:ppp1000.lariat.net@localhost
 [127.0.0.1]) by mail.lariat.net (8.9.3/8.9.3) with ESMTP id WAA00750;
 Wed, 9 Mar 2016 22:23:49 -0700 (MST)
Message-Id: <201603100523.WAA00750@mail.lariat.net>
X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9
Date: Wed, 09 Mar 2016 22:23:22 -0700
To: Sergej Schmidt <sergej.schmidt@uni-ulm.de>, freebsd-security@freebsd.org
From: Brett Glass <brett@lariat.org>
Subject: Re: Will 11.0-RELEASE include ASLR?
In-Reply-To: <56E0BEEB.2070901@uni-ulm.de>
References: <56E02D95.9020303@anongoth.pl>
 <201603091722.KAA24139@mail.lariat.net>
 <56E0BEEB.2070901@uni-ulm.de>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.21
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Mar 2016 05:24:00 -0000

At 05:25 PM 3/9/2016, Sergej Schmidt wrote:

>In which way ASLR has something to do with security by obscurity?

ASLR attempts to create security by obscuring the locations of 
objects within the machine's address space. Critics of ASLR say 
(with some justification!) that this is just hiding them... in 
plain sight. Without getting into a flame war about that, I would 
simply like the option of compiling it in or not.

--Brett Glass