Date: Fri, 4 Aug 2017 08:48:01 -0400 From: Shawn Webb <shawn.webb@hardenedbsd.org> To: syed khalid <0xsyed@gmail.com> Cc: Johannes Jost Meixner <johannes@perceivon.net>, freebsd-security@freebsd.org Subject: Re: SEGVGUARD in freeBSD Message-ID: <20170804124801.u6wpk47zfl5yl7ba@mutt-hbsd> In-Reply-To: <20170804124646.xxu74ibdm73ut354@mutt-hbsd> References: <CAERAQ8eYOAW-v5g6SYhtJf4v9OpBMWJEUirGgPVq6QhTNrc85A@mail.gmail.com> <bae76062-1b69-6350-8b47-bf11a0b61f1e@perceivon.net> <CAERAQ8e=qFGzdjZZcrt25T83CTrFZS9qJkAPFMB4GOX0Pa4Gfw@mail.gmail.com> <20170804124646.xxu74ibdm73ut354@mutt-hbsd>
next in thread | previous in thread | raw e-mail | index | archive | help
--4lpkcj4nbapfejla Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable I forgot to mention that hardening.pax.segvguard.status is a sysctl node. To set it: sysctl hardening.pax.segvguard.status=3D2 Or in /etc/sysctl.conf: hardening.pax.segvguard.status=3D2 Thanks, Shawn On Fri, Aug 04, 2017 at 08:46:46AM -0400, Shawn Webb wrote: > After booting HardenedBSD, set hardening.pax.segvguard.status=3D2. No > configuration is necessary. >=20 > Thanks, >=20 > Shawn >=20 > On Fri, Aug 04, 2017 at 05:15:51PM +0530, syed khalid wrote: > > Hello Johannes/Shawn, > >=20 > > Thanks for the information. I would like to experiment SEGVGUARD and I > > would like to monitor the performance of the kernel in the context of > > SEGVGUARD enabled for a single application. How do i enable or configure > > the SEGVGUARD service in HardenedBSD? > >=20 > > Regards, > > Syed > >=20 > > On Thu, Aug 3, 2017 at 9:18 PM, Johannes Jost Meixner < > > johannes@perceivon.net> wrote: > >=20 > > > You'll want to checkout HardenedBSD[1], especially the 10-STABLE buil= ds > > > [2]. > > > > > > > > > [1] https://www.hardenedbsd.org > > > [2] > > > http://jenkins.hardenedbsd.org/builds/HardenedBSD-10-STABLE-amd64-LAT= EST/ > > > > > > > > > > > > Best regards, > > > > > > Johannes Meixner > > > > > > > > > Perceivon O?? > > > Pikk 7-17 > > > 10123 Tallinn > > > > > > tel: +372 5855 1779 > > > web: http://www.perceivon.net > > > > > > On 08/03/2017 18:35, syed khalid wrote: > > > > Hello All, > > > > > > > > I would like to configure SEGVGUARD for few critical applications in > > > > FreeBSD10 . Is is available natively in FreeBSD10 ? > > > > > > > > If so you could anyone help me in enabling/configuring SEGVGUARD > > > > > > > > > > > >=20 > >=20 > > --=20 > > *Thanks & Regards* > > *Syed Khalid M* > > *Mobile No:+91-8148910714* >=20 > --=20 > Shawn Webb > Cofounder and Security Engineer > HardenedBSD >=20 > GPG Key ID: 0x6A84658F52456EEE > GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE --=20 Shawn Webb Cofounder and Security Engineer HardenedBSD GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE --4lpkcj4nbapfejla Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEKrq2ve9q9Ia+iT2eaoRlj1JFbu4FAlmEbQAACgkQaoRlj1JF bu4mKg//U8yn06ZmFR67aK7qEeTyUZCo1Ty3EZg2xjenmVqEjl7Tl9IYRRplbHFr kQ+QcyxtFRxvu9sRwZ9hoLSkBUiq2rKnuOBrmo84vsvG/ZDIgedfpICcO5TBus/g 8VhVhpdi584FHRRbcmZyE2lDxA9aEo0t+8r901iflpxlI5LDFaORI2R4Uu/oTfHW 5yRKKGIc3G0+/+EVfYZyUDBr8Ppl8wZnNC1b0oo7NuC8WYOLdCeVGM+FP3Wl8NM2 SytXQZND56fhKSa2HK8/wzcrD+WMWQEw+MQh6/LPGeazGjldHXTRqfWf7ljCD1uV xydL37yTFbMGWPvE0JFs0sDKkUfcJcYUmljg75G6UXPvvxGzuT07VwE/WFNB+GDX U/n3AFBrqw4mMmowfuN0yfpmygLu+WAMzx0843xfMgvHxrIT0Q9R/bNoe6EWRZvp fOhBulSjDc86ISYYLed47G+jV6worFcMQjPeaglj1y6O0fYr6tRm7uGOGGBk3+MC uFdYALC+tpCmjJbLZF6/7R3XOpP3kfUjttN3mmPsvgc1AwxGgk2t28tuLXINodVm Y8fiqsYNQojv23XmuTRiLHCwRLmT4eiGOw4ZwWB/16dwPn8+uaihYYLtTok88eyD zNcgZlmgXWomF8dp2dkrwWAHgNE1q4w/Zjs0CUku66L9A2qVJDs= =WNl6 -----END PGP SIGNATURE----- --4lpkcj4nbapfejla--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20170804124801.u6wpk47zfl5yl7ba>