3 ms·

Thanks, that's exactly what I was thinking of. Does it re-link only libc on startup, or other libraries as well? Found the slide that I remembered: https://twi

by PeCaN 10y ago

Thanks, that's exactly what I was thinking of. Does it re-link only libc on startup, or other libraries as well? Found the slide that I remembered: https://twitter.com/justincormack/status/577005049374601217 https://twitter.com/justincormack/status/577005049374601217 Do you know if any of the rest of that is in-progress or complete?

notaplumber 10y ago
My observations.. * binutils 2.17 (last GPLv2) - complete. * all archs transitioned to pie - complete as of 5.7. * /sbin/init static pie - complete. * ROP gadgets are being hunted down systematically, many nop sleds changed to int3/illegal instr. * BROP - many base daemons now fork + exec, not all. * SROP - mitigation committed - complete? * shuffle - libc objects get shuffled at boot by rc(8), stack object order shuffling as a gcc extension. .. Progress continues.