Print this page
uts: Allow for address space randomisation.
Randomise the base addresses of shared objects, non-fixed mappings, the
stack and the heap.  Introduce a service, svc:/system/process-security,
and a tool psecflags(1) to control and observe it

*** 554,564 **** MSG_DT_SUNW_SYMSORTSZ_CF, MSG_DT_SUNW_TLSSORT_CF, MSG_DT_SUNW_TLSSORTSZ_CF, MSG_DT_SUNW_CAPINFO_CF, MSG_DT_SUNW_STRPAD_CF, MSG_DT_SUNW_CAPCHAIN_CF, MSG_DT_SUNW_LDMACH_CF, 0, MSG_DT_SUNW_CAPCHAINENT_CF, 0, ! MSG_DT_SUNW_CAPCHAINSZ_CF }; static const Msg tags_sunw_auxiliary_cfnp[] = { MSG_DT_SUNW_AUXILIARY_CFNP, MSG_DT_SUNW_RTLDINF_CFNP, MSG_DT_SUNW_FILTER_CFNP, MSG_DT_SUNW_CAP_CFNP, MSG_DT_SUNW_SYMTAB_CFNP, MSG_DT_SUNW_SYMSZ_CFNP, --- 554,566 ---- MSG_DT_SUNW_SYMSORTSZ_CF, MSG_DT_SUNW_TLSSORT_CF, MSG_DT_SUNW_TLSSORTSZ_CF, MSG_DT_SUNW_CAPINFO_CF, MSG_DT_SUNW_STRPAD_CF, MSG_DT_SUNW_CAPCHAIN_CF, MSG_DT_SUNW_LDMACH_CF, 0, MSG_DT_SUNW_CAPCHAINENT_CF, 0, ! MSG_DT_SUNW_CAPCHAINSZ_CF, 0, ! 0, 0, ! MSG_DT_SUNW_ASLR_CF }; static const Msg tags_sunw_auxiliary_cfnp[] = { MSG_DT_SUNW_AUXILIARY_CFNP, MSG_DT_SUNW_RTLDINF_CFNP, MSG_DT_SUNW_FILTER_CFNP, MSG_DT_SUNW_CAP_CFNP, MSG_DT_SUNW_SYMTAB_CFNP, MSG_DT_SUNW_SYMSZ_CFNP,
*** 566,576 **** MSG_DT_SUNW_SYMSORTSZ_CFNP, MSG_DT_SUNW_TLSSORT_CFNP, MSG_DT_SUNW_TLSSORTSZ_CFNP, MSG_DT_SUNW_CAPINFO_CFNP, MSG_DT_SUNW_STRPAD_CFNP, MSG_DT_SUNW_CAPCHAIN_CFNP, MSG_DT_SUNW_LDMACH_CFNP, 0, MSG_DT_SUNW_CAPCHAINENT_CFNP, 0, ! MSG_DT_SUNW_CAPCHAINSZ_CFNP }; static const Msg tags_sunw_auxiliary_nf[] = { MSG_DT_SUNW_AUXILIARY_NF, MSG_DT_SUNW_RTLDINF_NF, MSG_DT_SUNW_FILTER_NF, MSG_DT_SUNW_CAP_NF, MSG_DT_SUNW_SYMTAB_NF, MSG_DT_SUNW_SYMSZ_NF, --- 568,580 ---- MSG_DT_SUNW_SYMSORTSZ_CFNP, MSG_DT_SUNW_TLSSORT_CFNP, MSG_DT_SUNW_TLSSORTSZ_CFNP, MSG_DT_SUNW_CAPINFO_CFNP, MSG_DT_SUNW_STRPAD_CFNP, MSG_DT_SUNW_CAPCHAIN_CFNP, MSG_DT_SUNW_LDMACH_CFNP, 0, MSG_DT_SUNW_CAPCHAINENT_CFNP, 0, ! MSG_DT_SUNW_CAPCHAINSZ_CFNP, 0, ! 0, 0, ! MSG_DT_SUNW_ASLR_CFNP }; static const Msg tags_sunw_auxiliary_nf[] = { MSG_DT_SUNW_AUXILIARY_NF, MSG_DT_SUNW_RTLDINF_NF, MSG_DT_SUNW_FILTER_NF, MSG_DT_SUNW_CAP_NF, MSG_DT_SUNW_SYMTAB_NF, MSG_DT_SUNW_SYMSZ_NF,
*** 578,588 **** MSG_DT_SUNW_SYMSORTSZ_NF, MSG_DT_SUNW_TLSSORT_NF, MSG_DT_SUNW_TLSSORTSZ_NF, MSG_DT_SUNW_CAPINFO_NF, MSG_DT_SUNW_STRPAD_NF, MSG_DT_SUNW_CAPCHAIN_NF, MSG_DT_SUNW_LDMACH_NF, 0, MSG_DT_SUNW_CAPCHAINENT_NF, 0, ! MSG_DT_SUNW_CAPCHAINSZ_NF }; static const conv_ds_msg_t ds_sunw_auxiliary_cf = { CONV_DS_MSG_INIT(DT_SUNW_AUXILIARY, tags_sunw_auxiliary_cf) }; static const conv_ds_msg_t ds_sunw_auxiliary_cfnp = { CONV_DS_MSG_INIT(DT_SUNW_AUXILIARY, tags_sunw_auxiliary_cfnp) }; --- 582,594 ---- MSG_DT_SUNW_SYMSORTSZ_NF, MSG_DT_SUNW_TLSSORT_NF, MSG_DT_SUNW_TLSSORTSZ_NF, MSG_DT_SUNW_CAPINFO_NF, MSG_DT_SUNW_STRPAD_NF, MSG_DT_SUNW_CAPCHAIN_NF, MSG_DT_SUNW_LDMACH_NF, 0, MSG_DT_SUNW_CAPCHAINENT_NF, 0, ! MSG_DT_SUNW_CAPCHAINSZ_NF, 0, ! 0, 0, ! MSG_DT_SUNW_ASLR_NF }; static const conv_ds_msg_t ds_sunw_auxiliary_cf = { CONV_DS_MSG_INIT(DT_SUNW_AUXILIARY, tags_sunw_auxiliary_cf) }; static const conv_ds_msg_t ds_sunw_auxiliary_cfnp = { CONV_DS_MSG_INIT(DT_SUNW_AUXILIARY, tags_sunw_auxiliary_cfnp) };