4 ms·

For reference, this was several years ago- 2015 or thereabouts. The FreeBSD project has since added or improved various security features (or made them more ac

For reference, this was several years ago- 2015 or thereabouts. The FreeBSD project has since added or improved various security features (or made them more accessible) directly as a result of the work from and/or the pressure exerted by HardenedBSD. This was not the case early on, and to my memory, in the early days of HardenedBSD, the relationship between the two groups could have generously been described as acrimonious. For an example, see the ASLR-on-FreeBSD debate.

0x457 4y ago
> For an example, see the ASLR-on-FreeBSD debate. Not much of a debate? You either take contribution feedback or you don't contribute. When I open a PR to some open-source project, and maintainers/contributors give me feedback, I incorporate it and don't throw a tantrum. Everything aside, ASLR is present since 13.0 and default in 14.0. Different implementation. Usefulness of ASLR in general is another debate.
- acoppora 4y ago
  To clarify, FreeBSD 14.0 is not out and probably won't be out for quite some time. All users of the current release are still without even basic ASLR.
  - emaste 4y ago
    That's not true - it is in all supported releases, but not enabled by default. It will be enabled by default in the upcoming 131.1
    - acoppora 4y ago
      I meant by default. The title of this paper I'm commenting on should make it clear, but sorry if it wasn't.
      - nix23 4y ago
        Installation (Hardening Dialog) you can enable it.