On Wed, Mar 09, 2016 at 10:23:22PM -0700, Brett Glass wrote:
> At 05:25 PM 3/9/2016, Sergej Schmidt wrote:
> 
> >In which way ASLR has something to do with security by obscurity?
> 
> ASLR attempts to create security by obscuring the locations of 
> objects within the machine's address space. Critics of ASLR say 
> (with some justification!) that this is just hiding them... in 
> plain sight. Without getting into a flame war about that, I would 
> simply like the option of compiling it in or not.

That option has always been available in HardenedBSD's implementation.
It has been a kernel option that you can toggle at compile time with the
PAX_ASLR kernel option. IT can also be toggled via /boot/loader.conf by
setting hardening.pax.aslr.status=0.

Thanks,

-- 
Shawn Webb
HardenedBSD

GPG Key ID:          0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89  3D9E 6A84 658F 5245 6EEE

Attachment: signature.asc
Description: PGP signature

Reply via email to