3 ms·
I fear this piece is being taken as a “hit piece” when it should be taken as an aid in hardening a FreeBSD box.
by ianai 7y ago
I fear this piece is being taken as a “hit piece” when it should be taken as an aid in hardening a FreeBSD box.
- ummonk 7y agoWell, the delays in adding ASLR and W^X (have the added W^X yet?) aren't something you can work around by hardening.
- howard941 7y agoDespite my sibling post to yours I think it's a good point. This https://forums.freebsd.org/threads/no-aslr-upstreaming.54771/ https://forums.freebsd.org/threads/no-aslr-upstreaming.54771... has some content that may be of historical interest as to the why the ASLR delays (I can't speak to W^X). Going forward ASLR may take no more than another boot time knob twiddle https://wiki.freebsd.org/ASLR https://wiki.freebsd.org/ASLR to add to OP .
- howard941 7y agoThat's exactly what's happening
- markjdb 7y agoIt's both. There's a lot of prose questioning the intent and competency of FreeBSD developers. The addendum for instance smarmily suggests that the PTI patch had no review at all when it certainly did and the referenced post even contains a link to that review.