Date: Sat, 5 Aug 2017 12:26:37 +0100 From: Big Lebowski <spankthespam@gmail.com> To: Shawn Webb <shawn.webb@hardenedbsd.org> Cc: syed khalid <0xsyed@gmail.com>, freebsd-security <freebsd-security@freebsd.org>, Johannes Jost Meixner <johannes@perceivon.net> Subject: Re: SEGVGUARD in freeBSD Message-ID: <CAHcXP%2BfA20VWPhXSZhG=DUctO8=3ivNwRRHOUEk-Vw1xeWPsKA@mail.gmail.com> In-Reply-To: <20170804124801.u6wpk47zfl5yl7ba@mutt-hbsd> References: <CAERAQ8eYOAW-v5g6SYhtJf4v9OpBMWJEUirGgPVq6QhTNrc85A@mail.gmail.com> <bae76062-1b69-6350-8b47-bf11a0b61f1e@perceivon.net> <CAERAQ8e=qFGzdjZZcrt25T83CTrFZS9qJkAPFMB4GOX0Pa4Gfw@mail.gmail.com> <20170804124646.xxu74ibdm73ut354@mutt-hbsd> <20170804124801.u6wpk47zfl5yl7ba@mutt-hbsd>
next in thread | previous in thread | raw e-mail | index | archive | help
It does sound like a discussion better suited for HardenedBSD mailing lists, don't you think? ;) Regards, BL On Fri, Aug 4, 2017 at 1:48 PM, Shawn Webb <shawn.webb@hardenedbsd.org> wrote: > I forgot to mention that hardening.pax.segvguard.status is a sysctl > node. To set it: > > sysctl hardening.pax.segvguard.status=2 > > Or in /etc/sysctl.conf: > > hardening.pax.segvguard.status=2 > > Thanks, > > Shawn > > On Fri, Aug 04, 2017 at 08:46:46AM -0400, Shawn Webb wrote: > > After booting HardenedBSD, set hardening.pax.segvguard.status=2. No > > configuration is necessary. > > > > Thanks, > > > > Shawn > > > > On Fri, Aug 04, 2017 at 05:15:51PM +0530, syed khalid wrote: > > > Hello Johannes/Shawn, > > > > > > Thanks for the information. I would like to experiment SEGVGUARD and I > > > would like to monitor the performance of the kernel in the context of > > > SEGVGUARD enabled for a single application. How do i enable or > configure > > > the SEGVGUARD service in HardenedBSD? > > > > > > Regards, > > > Syed > > > > > > On Thu, Aug 3, 2017 at 9:18 PM, Johannes Jost Meixner < > > > johannes@perceivon.net> wrote: > > > > > > > You'll want to checkout HardenedBSD[1], especially the 10-STABLE > builds > > > > [2]. > > > > > > > > > > > > [1] https://www.hardenedbsd.org > > > > [2] > > > > http://jenkins.hardenedbsd.org/builds/HardenedBSD-10- > STABLE-amd64-LATEST/ > > > > > > > > > > > > > > > > Best regards, > > > > > > > > Johannes Meixner > > > > > > > > > > > > Perceivon O?? > > > > Pikk 7-17 > > > > 10123 Tallinn > > > > > > > > tel: +372 5855 1779 > > > > web: http://www.perceivon.net > > > > > > > > On 08/03/2017 18:35, syed khalid wrote: > > > > > Hello All, > > > > > > > > > > I would like to configure SEGVGUARD for few critical applications > in > > > > > FreeBSD10 . Is is available natively in FreeBSD10 ? > > > > > > > > > > If so you could anyone help me in enabling/configuring SEGVGUARD > > > > > > > > > > > > > > > > > > > > > > -- > > > *Thanks & Regards* > > > *Syed Khalid M* > > > *Mobile No:+91-8148910714* > > > > -- > > Shawn Webb > > Cofounder and Security Engineer > > HardenedBSD > > > > GPG Key ID: 0x6A84658F52456EEE > > GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE > > > > -- > Shawn Webb > Cofounder and Security Engineer > HardenedBSD > > GPG Key ID: 0x6A84658F52456EEE > GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAHcXP%2BfA20VWPhXSZhG=DUctO8=3ivNwRRHOUEk-Vw1xeWPsKA>