ASLR for golang on OpenBSD

2017-06-09 Thread rain1
Hello! Here is a patch that lets you use `go build -buildmode=pie file.go` to compile golang binaries on OpenBSD and get ASLR. By default all the golang binaries compiled on openbsd are not randomized, only linux and android have that feature. This patch is against go1.8.3.src.tar.gz

Fwd: Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread rain1
On 2016-04-26 14:24, Kamil Cholewiński wrote: On Tue, 26 Apr 2016, ra...@openmailbox.org wrote: If you want to make a dynamic "web application" then consider using ur/web [1]. The programming language itself protects against SQL injection, XSS attacks, CSRF attacks. I hate to bring the bad

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread rain1
On 2016-04-26 10:03, Rubén Llorente wrote: On Tue, 26 Apr 2016 06:15:22 +, David Lou wrote: When I say 'blog', I'm referring to a website that contains essentially many pages of content. Each content page has attributes such as title, date, category, tags, and so on. When a user browsers

pledging fork?

2016-04-24 Thread rain1
I'm having a problem with pledge on openbsd #include void main(void) { pledge("proc", NULL); fork(); } when I run this I get: Program received signal SIGABRT, Aborted. 0x05f7309c70ba in mprotect () at :2 here is a backtrace #0 0x05f7309c70ba in mprotect () at :2 #1