[racket-users] DrRacket on OpenBSD 6.0

2016-09-02 Thread Philippe Meunier
Hello, FYI, W^X is now more strictly enforced on OpenBSD so DrRacket is not going to work anymore be default: https://marc.info/?l=openbsd-misc=147273821220405 "We are pleased to announce the official release of OpenBSD 6.0. [...] - Security improvements: o W^X is now strictly enforced by

Re: [racket-users] racket not W^X?

2016-04-05 Thread Philippe Meunier
Robby Findler wrote: >How is it possible to generate code at runtime and also enforce W^X? Short answer: using the mprotect system call (see the second paragraph below). Suppose your racket web server has a memory page somewhere which is both writable and executable. A pirate uses a buffer

Re: [racket-users] racket not W^X?

2016-04-05 Thread Philippe Meunier
Matthew Flatt wrote: >Since, as you note, units of JIT >generation tend to be smaller than a page, this creates trouble if >JITted code running in one thread is allocated on the same page as >JITting in progress in another thread. My guess is that from the point of view of security the proper way

[racket-users] racket not W^X?

2016-04-01 Thread Philippe Meunier
Hello, I was reading a discussion about "an upcoming Common Criteria requirement that no memory may be executable and writable at the same time": https://readlist.com/lists/openbsd.org/misc/33/168358.html (Common Criteria = the Common Criteria for Information Technology Security Evaluation