Print this page
7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

Split Close
Expand all
Collapse all
          --- old/usr/src/uts/common/sys/elf.h
          +++ new/usr/src/uts/common/sys/elf.h
↓ open down ↓ 812 lines elided ↑ open up ↑
 813  813  #define NT_PRCRED       14      /* prcred_t     <sys/procfs.h>          */
 814  814  #define NT_UTSNAME      15      /* struct utsname <sys/utsname.h>       */
 815  815  #define NT_LWPSTATUS    16      /* lwpstatus_t  <sys/procfs.h>          */
 816  816  #define NT_LWPSINFO     17      /* lwpsinfo_t   <sys/procfs.h>          */
 817  817  #define NT_PRPRIV       18      /* prpriv_t     <sys/procfs.h>          */
 818  818  #define NT_PRPRIVINFO   19      /* priv_impl_info_t <sys/priv.h>        */
 819  819  #define NT_CONTENT      20      /* core_content_t <sys/corectl.h>       */
 820  820  #define NT_ZONENAME     21      /* string from getzonenamebyid(3C)      */
 821  821  #define NT_FDINFO       22      /* open fd info                         */
 822  822  #define NT_SPYMASTER    23      /* psinfo_t for agent LWP spymaster     */
 823      -#define NT_NUM          23
      823 +#define NT_SECFLAGS     24      /* process security-flags */
      824 +#define NT_NUM          24
 824  825  
 825  826  
 826  827  #ifdef _KERNEL
 827  828  /*
 828  829   * The following routine checks the processor-specific
 829  830   * fields of an ELF header.
 830  831   */
 831  832  int     elfheadcheck(unsigned char, Elf32_Half, Elf32_Word);
 832  833  #endif
 833  834  
↓ open down ↓ 17 lines elided ↑ open up ↑
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX