Print this page
7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.


 263 <!ELEMENT arg                        (#PCDATA)>
 264 
 265 <!-- exec_env token -->
 266 <!ELEMENT exec_env           (env*)>
 267 <!ELEMENT env                        (#PCDATA)>
 268 
 269 <!-- arbitrary token -->
 270 <!ELEMENT arbitrary          (#PCDATA)>
 271 <!ATTLIST arbitrary
 272                 print           CDATA #REQUIRED
 273                 type            CDATA #REQUIRED
 274                 count           CDATA #REQUIRED
 275 >
 276 
 277 <!-- privilege token -->
 278 <!ELEMENT privilege          (#PCDATA)>
 279 <!ATTLIST privilege
 280                 set-type        CDATA #REQUIRED
 281 >
 282 







 283 <!-- use_of_privilege token -->
 284 <!ELEMENT use_of_privilege   (#PCDATA)>
 285 <!ATTLIST use_of_privilege
 286                 result          CDATA #REQUIRED
 287 >
 288 
 289 <!-- sensitivity_label token -->
 290 <!ELEMENT sensitivity_label  (#PCDATA)>
 291 
 292 <!-- use_of_authorization token -->
 293 <!ELEMENT use_of_authorization       (#PCDATA)>
 294 
 295 <!-- IPC token -->
 296 <!ELEMENT IPC                        EMPTY>
 297 <!ATTLIST IPC
 298                 ipc-type        CDATA #REQUIRED
 299                 ipc-id          CDATA #REQUIRED
 300 >
 301 
 302 <!-- IPC_perm token -->




 263 <!ELEMENT arg                        (#PCDATA)>
 264 
 265 <!-- exec_env token -->
 266 <!ELEMENT exec_env           (env*)>
 267 <!ELEMENT env                        (#PCDATA)>
 268 
 269 <!-- arbitrary token -->
 270 <!ELEMENT arbitrary          (#PCDATA)>
 271 <!ATTLIST arbitrary
 272                 print           CDATA #REQUIRED
 273                 type            CDATA #REQUIRED
 274                 count           CDATA #REQUIRED
 275 >
 276 
 277 <!-- privilege token -->
 278 <!ELEMENT privilege          (#PCDATA)>
 279 <!ATTLIST privilege
 280                 set-type        CDATA #REQUIRED
 281 >
 282 
 283 <!-- secflags token -->
 284 <!ELEMENT secflags           (#PCDATA)>
 285 <!ATTLIST secflags
 286                 set-type        CDATA #REQUIRED
 287 >
 288 
 289 
 290 <!-- use_of_privilege token -->
 291 <!ELEMENT use_of_privilege   (#PCDATA)>
 292 <!ATTLIST use_of_privilege
 293                 result          CDATA #REQUIRED
 294 >
 295 
 296 <!-- sensitivity_label token -->
 297 <!ELEMENT sensitivity_label  (#PCDATA)>
 298 
 299 <!-- use_of_authorization token -->
 300 <!ELEMENT use_of_authorization       (#PCDATA)>
 301 
 302 <!-- IPC token -->
 303 <!ELEMENT IPC                        EMPTY>
 304 <!ATTLIST IPC
 305                 ipc-type        CDATA #REQUIRED
 306                 ipc-id          CDATA #REQUIRED
 307 >
 308 
 309 <!-- IPC_perm token -->