Besides the "S" option for malloc.conf and increasing kern.stackgap_random and 
removing the wxallowed mount option, what else memory-related hardening 
mechanism are in OpenBSD that can be turned on and it is not enabled by default?

Even options would be useful if we have to re-compile the kernel, if minimal 
source code modification is needed.

Tried to get lists/ideas from grsecurity (if there is any, that is not already 
used in OpenBSD), but it is hard when you are not a programmer.

Many thanks. 

Reply via email to