Print this page
uts: Allow for address space randomisation.
Randomise the base addresses of shared objects, non-fixed mappings, the
stack and the heap.  Introduce a service, svc:/system/process-security,
and a tool psecflags(1) to control and observe it


 174 
 175 /*
 176  * Used to indicate to the runtime linker the name of the emulation binary,
 177  * if one is being used. For brands, this is the name of the brand library.
 178  */
 179 #define AT_SUN_EMULATOR         2018
 180 
 181 #define AT_SUN_BRANDNAME        2019
 182 
 183 /*
 184  * Aux vectors available for brand modules.
 185  */
 186 #define AT_SUN_BRAND_AUX1       2020
 187 #define AT_SUN_BRAND_AUX2       2021
 188 #define AT_SUN_BRAND_AUX3       2022
 189 
 190 /*
 191  * Note that 2023 is reserved for the AT_SUN_HWCAP2 word defined above.
 192  */
 193 


 194 /*
 195  * The kernel is in a better position to determine whether a process needs to
 196  * ignore dangerous LD environment variables.  If set, this flags tells
 197  * ld.so.1 to run "secure" and ignore the the environment.
 198  */
 199 #define AF_SUN_SETUGID          0x00000001
 200 
 201 /*
 202  * If set, this flag indicates that hardware capabilites can be verified
 203  * against the AT_SUN_HWCAP value.
 204  */
 205 #define AF_SUN_HWCAPVERIFY      0x00000002
 206 
 207 /*
 208  * If set, this flag indicates that the the linker should not initialize
 209  * any of its link maps as primary link wrt the unified libc threading
 210  * interfaces.
 211  */
 212 #define AF_SUN_NOPLM            0x00000004
 213 


 174 
 175 /*
 176  * Used to indicate to the runtime linker the name of the emulation binary,
 177  * if one is being used. For brands, this is the name of the brand library.
 178  */
 179 #define AT_SUN_EMULATOR         2018
 180 
 181 #define AT_SUN_BRANDNAME        2019
 182 
 183 /*
 184  * Aux vectors available for brand modules.
 185  */
 186 #define AT_SUN_BRAND_AUX1       2020
 187 #define AT_SUN_BRAND_AUX2       2021
 188 #define AT_SUN_BRAND_AUX3       2022
 189 
 190 /*
 191  * Note that 2023 is reserved for the AT_SUN_HWCAP2 word defined above.
 192  */
 193 
 194 #define AT_SUN_SECFLAGS         2024
 195 
 196 /*
 197  * The kernel is in a better position to determine whether a process needs to
 198  * ignore dangerous LD environment variables.  If set, this flags tells
 199  * ld.so.1 to run "secure" and ignore the the environment.
 200  */
 201 #define AF_SUN_SETUGID          0x00000001
 202 
 203 /*
 204  * If set, this flag indicates that hardware capabilites can be verified
 205  * against the AT_SUN_HWCAP value.
 206  */
 207 #define AF_SUN_HWCAPVERIFY      0x00000002
 208 
 209 /*
 210  * If set, this flag indicates that the the linker should not initialize
 211  * any of its link maps as primary link wrt the unified libc threading
 212  * interfaces.
 213  */
 214 #define AF_SUN_NOPLM            0x00000004
 215