On 2017-10-19, trondd <[email protected]> wrote:
> Why does everyone always go straight to google? (Yeah, I know, silly
> question.) And then give up?
>
> Looking at the code might be a better start. Line 163 is particularly
> interesting...
>
> http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/etc/rc?annotate=1.519
Or even the documentation, rc.conf(5):
library_aslr rc reorders some libraries for improved protection against
ROP.
Kernel reordering can't be disabled like this, but at least it runs at the
end of startup, in the background.
