Print this page
7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

Split Close
Expand all
Collapse all
          --- old/usr/src/pkg/manifests/SUNWcs.mf
          +++ new/usr/src/pkg/manifests/SUNWcs.mf
↓ open down ↓ 544 lines elided ↑ open up ↑
 545  545  file path=lib/svc/manifest/system/filesystem/usr-fs.xml group=sys mode=0444
 546  546  $(i386_ONLY)file path=lib/svc/manifest/system/hostid.xml group=sys mode=0444
 547  547  file path=lib/svc/manifest/system/hotplug.xml group=sys mode=0444
 548  548  file path=lib/svc/manifest/system/identity.xml group=sys mode=0444
 549  549  file path=lib/svc/manifest/system/idmap.xml group=sys mode=0444
 550  550  file path=lib/svc/manifest/system/keymap.xml group=sys mode=0444
 551  551  file path=lib/svc/manifest/system/logadm-upgrade.xml group=sys mode=0444
 552  552  file path=lib/svc/manifest/system/manifest-import.xml group=sys mode=0444
 553  553  file path=lib/svc/manifest/system/name-service-cache.xml group=sys mode=0444
 554  554  file path=lib/svc/manifest/system/pfexecd.xml group=sys mode=0444
      555 +file path=lib/svc/manifest/system/process-security.xml group=sys mode=0444
 555  556  file path=lib/svc/manifest/system/rbac.xml group=sys mode=0444
 556  557  file path=lib/svc/manifest/system/rmtmpfiles.xml group=sys mode=0444
 557  558  file path=lib/svc/manifest/system/sac.xml group=sys mode=0444
 558  559  file path=lib/svc/manifest/system/svc/global.xml group=sys mode=0444
 559  560  file path=lib/svc/manifest/system/svc/restarter.xml group=sys mode=0444
 560  561  file path=lib/svc/manifest/system/system-log.xml group=sys mode=0444
 561  562  file path=lib/svc/manifest/system/utmp.xml group=sys mode=0444
 562  563  file path=lib/svc/manifest/system/vtdaemon.xml group=sys mode=0444
 563  564  file path=lib/svc/method/boot-archive mode=0555
 564  565  file path=lib/svc/method/boot-archive-update mode=0555
↓ open down ↓ 512 lines elided ↑ open up ↑
1077 1078  file path=usr/lib/help/auths/locale/C/SmfValueExAcctTask.html
1078 1079  file path=usr/lib/help/auths/locale/C/SmfValueFirewall.html
1079 1080  file path=usr/lib/help/auths/locale/C/SmfValueHeader.html
1080 1081  file path=usr/lib/help/auths/locale/C/SmfValueIPsec.html
1081 1082  file path=usr/lib/help/auths/locale/C/SmfValueIdmap.html
1082 1083  file path=usr/lib/help/auths/locale/C/SmfValueInetd.html
1083 1084  file path=usr/lib/help/auths/locale/C/SmfValueMDNS.html
1084 1085  file path=usr/lib/help/auths/locale/C/SmfValueNADD.html
1085 1086  file path=usr/lib/help/auths/locale/C/SmfValueNDMP.html
1086 1087  file path=usr/lib/help/auths/locale/C/SmfValueNWAM.html
     1088 +file path=usr/lib/help/auths/locale/C/SmfValueProcSec.html
1087 1089  file path=usr/lib/help/auths/locale/C/SmfValueRouting.html
1088 1090  file path=usr/lib/help/auths/locale/C/SmfValueSMB.html
1089 1091  file path=usr/lib/help/auths/locale/C/SmfValueVscan.html
1090 1092  file path=usr/lib/help/auths/locale/C/SmfValueVt.html
1091 1093  file path=usr/lib/help/auths/locale/C/SmfVscanStates.html
1092 1094  file path=usr/lib/help/auths/locale/C/SmfVtStates.html
1093 1095  file path=usr/lib/help/auths/locale/C/SmfWpaStates.html
1094 1096  file path=usr/lib/help/auths/locale/C/SysCpuPowerMgmt.html
1095 1097  file path=usr/lib/help/auths/locale/C/SysDate.html
1096 1098  file path=usr/lib/help/auths/locale/C/SysHeader.html
↓ open down ↓ 761 lines elided ↑ open up ↑
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX