Print this page
7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

Split Close
Expand all
Collapse all
          --- old/usr/src/lib/libscf/inc/libscf.h
          +++ new/usr/src/lib/libscf/inc/libscf.h
↓ open down ↓ 320 lines elided ↑ open up ↑
 321  321  #define SCF_PROPERTY_PROFILE            ((const char *)"profile")
 322  322  #define SCF_PROPERTY_PROJECT            ((const char *)"project")
 323  323  #define SCF_PROPERTY_REFRESH            ((const char *)"refresh")
 324  324  #define SCF_PROPERTY_RESOURCE_POOL      ((const char *)"resource_pool")
 325  325  #define SCF_PROPERTY_ENVIRONMENT        ((const char *)"environment")
 326  326  #define SCF_PROPERTY_RESTART            ((const char *)"restart")
 327  327  #define SCF_PROPERTY_RESTARTER          ((const char *)"restarter")
 328  328  #define SCF_PROPERTY_RESTART_INTERVAL   ((const char *)"restart_interval")
 329  329  #define SCF_PROPERTY_RESTART_ON         ((const char *)"restart_on")
 330  330  #define SCF_PROPERTY_RESTORE            ((const char *)"restore")
      331 +#define SCF_PROPERTY_SECFLAGS           ((const char *)"security_flags")
 331  332  #define SCF_PROPERTY_SINGLE_INSTANCE    ((const char *)"single_instance")
 332  333  #define SCF_PROPERTY_START_METHOD_TIMESTAMP     \
 333  334          ((const char *)"start_method_timestamp")
 334  335  #define SCF_PROPERTY_START_METHOD_WAITSTATUS    \
 335  336          ((const char *)"start_method_waitstatus")
 336  337  #define SCF_PROPERTY_START_PID          ((const char *)"start_pid")
 337  338  #define SCF_PROPERTY_STATE              ((const char *)"state")
 338  339  #define SCF_PROPERTY_STABILITY          ((const char *)"stability")
 339  340  #define SCF_PROPERTY_STATE_TIMESTAMP    ((const char *)"state_timestamp")
 340  341  #define SCF_PROPERTY_SUPP_GROUPS        ((const char *)"supp_groups")
↓ open down ↓ 508 lines elided ↑ open up ↑
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX