> On May 6, 2020, at 6:10 PM, Chavdar Ivanov <[email protected]> wrote: > > You don't boot KASLR this way. > > You put > > menu=Boot KASLR:rndseed /var/db/entropy-file;pkboot netbsd_kaslr > > in your boot.cfg and copy /usr/mdec/prekern to / . > > (I copy the KASLR kernel to /netbsd_kaslr).
Ah ha! For those who read this thread later, consider looking at this: https://wiki.netbsd.org/security/kaslr/ I’ll still have to make mods to my setup to deal with the entropy-file, but PR #48702 points the way. Thanks to all who showed the way...
