Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 18 Aug 2001 19:03:40 -0700
From:      Kris Kennaway <kris@obsecurity.org>
To:        audit@FreeBSD.org
Subject:   [art@cvs.openbsd.org: CVS: cvs.openbsd.org: src]
Message-ID:  <20010818190339.A76832@xor.obsecurity.org>

next in thread | raw e-mail | index | archive | help

--jRHKVT23PllUwdXP
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Anyone up for porting this?

Kris

----- Forwarded message from Artur Grabowski <art@cvs.openbsd.org> -----

Delivered-To: kkenn@localhost.obsecurity.org
Delivered-To: kris@freebsd.org
Date: Fri, 17 Aug 2001 21:32:16 -0600 (MDT)
From: Artur Grabowski <art@cvs.openbsd.org>
To: source-changes@cvs.openbsd.org
Subject: CVS: cvs.openbsd.org: src
Precedence: bulk
Reply-To: Artur Grabowski <art@cvs.openbsd.org>
X-Loop: source-changes@openbsd.org
X-UIDL: 2307983f1074b8429d691305aa7c6c5c

CVSROOT:	/cvs
Module name:	src
Changes by:	art@cvs.openbsd.org	2001/08/17 21:32:16

Modified files:
	sys/kern       : kern_exec.c kern_sysctl.c=20
	sys/sys        : sysctl.h=20
	lib/libc/gen   : sysctl.3=20
	sbin/sysctl    : sysctl.8=20

Log message:
Add a possibility to add a random offset to the stack on exec. This makes
it slightly harder to write generic buffer overflows. This doesn't really
give any real security, but it raises the bar for script-kiddies and it's
really cheap.

The range of the random offsets is controlled by the sysctl
kern.stackgap_random (must be a power of 2).

This is disabled by default right now, but we'll set it to a reasonable val=
ue
(1024?) soon, after some more testing.



----- End forwarded message -----

--jRHKVT23PllUwdXP
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7fx57Wry0BWjoQKURAjV+AKCMj3ML0yx2BWZLXb5dedermklLPgCg2aX2
zMIMPRMjPKQr/NwavqkOw1w=
=JQ8h
-----END PGP SIGNATURE-----

--jRHKVT23PllUwdXP--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-audit" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010818190339.A76832>