Print this page
7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

Split Close
Expand all
Collapse all
          --- old/usr/src/uts/common/sys/prsystm.h
          +++ new/usr/src/uts/common/sys/prsystm.h
↓ open down ↓ 45 lines elided ↑ open up ↑
  46   46  extern kmutex_t pr_pidlock;
  47   47  extern kcondvar_t *pr_pid_cv;
  48   48  
  49   49  struct prfpregset;
  50   50  struct pstatus;
  51   51  struct lwpstatus;
  52   52  struct psinfo;
  53   53  struct lwpsinfo;
  54   54  struct prcred;
  55   55  struct prpriv;
       56 +struct prsecflags;
  56   57  
  57   58  struct seg;
  58   59  struct regs;
  59   60  struct watched_page;
  60   61  
  61   62  /*
  62   63   * These are functions in the procfs module that are
  63   64   * called from the kernel proper and from other modules.
  64   65   */
  65   66  extern uint_t pr_getprot(struct seg *, int, void **,
↓ open down ↓ 11 lines elided ↑ open up ↑
  77   78  extern void prgetprxregs(klwp_t *, caddr_t);
  78   79  extern int  prgetprxregsize(proc_t *);
  79   80  #if defined(__lint)
  80   81  /* Work around lint confusion between old and new prcred definitions */
  81   82  extern void prgetcred();
  82   83  #else
  83   84  extern void prgetcred(proc_t *, struct prcred *);
  84   85  #endif
  85   86  extern void prgetpriv(proc_t *, struct prpriv *);
  86   87  extern size_t prgetprivsize(void);
       88 +extern void prgetsecflags(proc_t *, struct prsecflags *);
  87   89  extern int  prnsegs(struct as *, int);
  88   90  extern void prexit(proc_t *);
  89   91  extern void prfree(proc_t *);
  90   92  extern void prlwpexit(kthread_t *);
  91   93  extern void prlwpfree(proc_t *, lwpent_t *);
  92   94  extern void prexecstart(void);
  93   95  extern void prexecend(void);
  94   96  extern void prrelvm(void);
  95   97  extern void prbarrier(proc_t *);
  96   98  extern void prstop(int, int);
↓ open down ↓ 54 lines elided ↑ open up ↑
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX