Print this page
uts: Allow for address space randomisation.
Randomise the base addresses of shared objects, non-fixed mappings, the
stack and the heap. Introduce a service, svc:/system/process-security,
and a tool psecflags(1) to control and observe it
*** 323,332 ****
--- 323,338 ----
typedef union {
Conv_inv_buf_t inv_buf;
char buf[CONV_CNOTE_PROC_FLAG_BUFSIZE];
} Conv_cnote_proc_flag_buf_t;
+ /* conv_psecflags() */
+ #define CONV_PSECFLAGS_BUFSIZE 31
+ typedef union {
+ Conv_inv_buf_t inv_buf;
+ char buf[CONV_PSECFLAGS_BUFSIZE];
+ } Conv_secflags_buf_t;
/* conv_cnote_sigset() */
#define CONV_CNOTE_SIGSET_BUFSIZE 639
typedef union {
Conv_inv_buf_t inv_buf;
*** 820,829 ****
--- 826,837 ----
Conv_inv_buf_t *);
extern const char *conv_cnote_pr_why(short, Conv_fmt_flags_t,
Conv_inv_buf_t *);
extern const char *conv_cnote_priv(int, Conv_fmt_flags_t,
Conv_inv_buf_t *);
+ extern const char *conv_psecflags(int, Conv_fmt_flags_t,
+ Conv_secflags_buf_t *);
extern const char *conv_cnote_psetid(int, Conv_fmt_flags_t,
Conv_inv_buf_t *);
extern const char *conv_cnote_sa_flags(int, Conv_fmt_flags_t,
Conv_cnote_sa_flags_buf_t *);
extern const char *conv_cnote_signal(Word, Conv_fmt_flags_t,