From 6407bcfc0e8082507bbd366210c1d3bff00b257c Mon Sep 17 00:00:00 2001 From: Oliver Pinter Date: Wed, 8 Apr 2015 22:42:01 +0200 Subject: [PATCH] HBSD: added info about secadm and noexec to UPDATING-HardenedBSD Signed-off-by: Oliver Pinter --- UPDATING-HardenedBSD | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/UPDATING-HardenedBSD b/UPDATING-HardenedBSD index 65e463dc755a..a6d75c8b7916 100644 --- a/UPDATING-HardenedBSD +++ b/UPDATING-HardenedBSD @@ -1,3 +1,25 @@ +[20150318] Merged first part of NOEXEC project + +This is the first part of PaX's MPROTECT restriction: +* this merge brings per process level restriction settings +* eliminated the linux's sound related mmap weakness +* improved the logging +... + +If you have problem with your application, then install +secadm: + + * from pkg: + + pkg install secadm + + * or from github: + + # git clone https://github.com/hardenedbsd/secadm + # cd secadm + # make && make install + + [201502011] Changed kernel knobs Added ``options PAX`` to enable the HardenedBSD framework.