Print this page
7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

Split Close
Expand all
Collapse all
          --- old/usr/src/cmd/svc/milestone/Makefile
          +++ new/usr/src/cmd/svc/milestone/Makefile
↓ open down ↓ 67 lines elided ↑ open up ↑
  68   68          devices-audio.xml
  69   69  
  70   70  SYSDEVMANIFESTS= $(SYSDEVSVCS:%=$(ROOTSVCSYSTEMDEVICE)/%)
  71   71  
  72   72  SYSTEMSVCS= \
  73   73          boot-archive.xml \
  74   74          console-login.xml \
  75   75          early-manifest-import.xml \
  76   76          identity.xml \
  77   77          manifest-import.xml \
       78 +        process-security.xml \
  78   79          rmtmpfiles.xml  \
  79   80          vtdaemon.xml
  80   81  
  81   82  SYSTEMMANIFESTS = $(SYSTEMSVCS:%=$(ROOTSVCSYSTEM)/%)
  82   83  
  83   84  SYSTEMSVCSVCS= \
  84   85          restarter.xml \
  85   86          global.xml
  86   87  
  87   88  SYSTEMSVCMANIFESTS= $(SYSTEMSVCSVCS:%=$(ROOTSVCSYSTEM)/svc/%)
↓ open down ↓ 76 lines elided ↑ open up ↑
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX