Print this page
7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

Split Close
Expand all
Collapse all
          --- old/usr/src/lib/libc/port/mapfile-vers
          +++ new/usr/src/lib/libc/port/mapfile-vers
↓ open down ↓ 3041 lines elided ↑ open up ↑
3042 3042          _nss_XbyY_fgets;
3043 3043          _nss_XbyY_fini;
3044 3044          __nsw_extended_action_v1;
3045 3045          __nsw_freeconfig_v1;
3046 3046          __nsw_getconfig_v1;
3047 3047          __nthreads;
3048 3048          __openattrdirat;
3049 3049          option_to_attr;
3050 3050          __priv_bracket;
3051 3051          __priv_relinquish;
     3052 +        psecflags;
3052 3053          pset_assign_forced;
3053 3054          pset_bind_lwp;
3054 3055          _psignal;
3055 3056          pthread_attr_getdaemonstate_np;
3056 3057          pthread_attr_setdaemonstate_np;
3057 3058          _pthread_setcleanupinit;
3058 3059          __putwchar_xpg5;
3059 3060          __putwc_xpg5;
3060 3061          rctlctl;
3061 3062          rctllist;
3062 3063          _realbufend;
3063 3064          _resume;
3064 3065          _resume_ret;
3065 3066          _rpcsys;
3066 3067          _sbrk_grow_aligned;
3067 3068          scrwidth;
     3069 +        secflag_by_name;
     3070 +        secflag_clear;
     3071 +        secflags_copy;
     3072 +        secflags_difference;
     3073 +        secflags_fullset;
     3074 +        secflags_intersection;
     3075 +        secflags_isempty;
     3076 +        secflag_isset;
     3077 +        secflags_issubset;
     3078 +        secflags_issuperset;
     3079 +        secflag_set;
     3080 +        secflag_to_bit;
     3081 +        secflag_to_str;
     3082 +        secflags_union;
     3083 +        psecflags_validate_delta;
     3084 +        secflags_zero;
     3085 +        psecflags_default;
     3086 +        secflags_parse;
     3087 +        secflags_to_str;
     3088 +        psecflags_validate;
3068 3089          semctl64;
3069 3090          _semctl64;
3070 3091          set_setcontext_enforcement;
3071 3092          _setbufend;
3072 3093          __set_errno;
3073 3094          setprojrctl;
3074 3095          _setregid;
3075 3096          _setreuid;
3076 3097          setsigacthandler;
3077 3098          shmctl64;
↓ open down ↓ 308 lines elided ↑ open up ↑
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX