On 1/2/24 21:29, Thomas Gazagnaire wrote:
Hey there,
Do we have an up-to-date table of the defense-in-depth security features
enforced by solo5 on the different targets?
So far I found:
- W^X: https://github.com/Solo5/solo5/issues/303 -> not sure exactly where this
is enforced nowadays. The tests in https://github.com/Solo5/solo5/pull/363/files
seems to say that this only works on spt?
https://github.com/Solo5/solo5/pull/447/files looks like hvt_openbsd
also supports this.
Also of note:
https://github.com/Solo5/solo5/blob/master/tenders/hvt/hvt_freebsd.c#L138
https://github.com/Solo5/solo5/blob/master/tenders/hvt/hvt_freebsd.c#L197-L227
https://github.com/Solo5/solo5/blob/master/tenders/hvt/hvt_kvm.c#L143-L144