4 ms·
OpenBSD has randomized pids since the dawn of time. Why has Linux not taken this basic step to improve security?
by ttul 9y ago
OpenBSD has randomized pids since the dawn of time. Why has Linux not taken this basic step to improve security?
- hacknat 9y agoRandomized pids wouldn’t nexessarily help that much in this situation, especially if the getuid syscall is available. However, I agree with your general sentiment that there are basic security features that Linux could implement to make a lot of CVEs impotent. I think the community is coming round, but this stuff takes more work than most people may realize.
- ttul 9y agoOpenBSD randomizes everything they possibly can. This is a Good Thing and so cheap..