From f54a46580c4c3ca7e868a6fe083da07c757c664a Mon Sep 17 00:00:00 2001 From: Oliver Pinter Date: Fri, 5 Jun 2015 22:35:05 +0200 Subject: [PATCH] HBSD: bump __HardenedBSD_version to 24 after recent ASLR rewrite Signed-off-by: Oliver Pinter --- UPDATING-HardenedBSD | 8 ++++++++ sys/sys/pax.h | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/UPDATING-HardenedBSD b/UPDATING-HardenedBSD index 35c3fb54ece0..e038ba1a4056 100644 --- a/UPDATING-HardenedBSD +++ b/UPDATING-HardenedBSD @@ -1,3 +1,11 @@ +[20150605] ASLR "rewrite" and NOEXEC fixes after jhb's vm_mmap.c changes +__HardenedBSD_version = 24 + + Move the mmap randomization to it's own place and add more state enforcements (KASSERTs). + Added locking around pax_aslr_mmap(...). + Factore out the MAP_32BIT related code from pax_aslr_mmap(...), and move to pax_aslr_mmap_map_32bit(...) + + [20150604] fix ASLR - randomize the rtld's shared object too __HardenedBSD_version = 23 diff --git a/sys/sys/pax.h b/sys/sys/pax.h index ff5aa4ec354a..8a62200a59c3 100644 --- a/sys/sys/pax.h +++ b/sys/sys/pax.h @@ -32,7 +32,7 @@ #ifndef _SYS_PAX_H #define _SYS_PAX_H -#define __HardenedBSD_version 23 +#define __HardenedBSD_version 24 #if defined(_KERNEL) || defined(_WANT_PRISON) struct hardening_features {