Print this page
uts: Allow for address space randomisation.
Randomise the base addresses of shared objects, non-fixed mappings, the
stack and the heap. Introduce a service, svc:/system/process-security,
and a tool psecflags(1) to control and observe it
@@ -323,10 +323,16 @@
typedef union {
Conv_inv_buf_t inv_buf;
char buf[CONV_CNOTE_PROC_FLAG_BUFSIZE];
} Conv_cnote_proc_flag_buf_t;
+/* conv_psecflags() */
+#define CONV_PSECFLAGS_BUFSIZE 31
+typedef union {
+ Conv_inv_buf_t inv_buf;
+ char buf[CONV_PSECFLAGS_BUFSIZE];
+} Conv_secflags_buf_t;
/* conv_cnote_sigset() */
#define CONV_CNOTE_SIGSET_BUFSIZE 639
typedef union {
Conv_inv_buf_t inv_buf;
@@ -820,10 +826,12 @@
Conv_inv_buf_t *);
extern const char *conv_cnote_pr_why(short, Conv_fmt_flags_t,
Conv_inv_buf_t *);
extern const char *conv_cnote_priv(int, Conv_fmt_flags_t,
Conv_inv_buf_t *);
+extern const char *conv_psecflags(int, Conv_fmt_flags_t,
+ Conv_secflags_buf_t *);
extern const char *conv_cnote_psetid(int, Conv_fmt_flags_t,
Conv_inv_buf_t *);
extern const char *conv_cnote_sa_flags(int, Conv_fmt_flags_t,
Conv_cnote_sa_flags_buf_t *);
extern const char *conv_cnote_signal(Word, Conv_fmt_flags_t,