[BACK]Return to hardening.mdwn CVS log [TXT] [DIR] Up to [NetBSD Developer Wiki] / wikisrc / pkgsrc

Diff for /wikisrc/pkgsrc/hardening.mdwn between versions 1.12 and 1.13

version 1.12, 2017/06/25 16:01:07 version 1.13, 2017/06/25 16:11:04
Line 149  as opposed to the following binary, buil Line 149  as opposed to the following binary, buil
   
 The latter result is then what is expected.  The latter result is then what is expected.
   
 ## Checking for RELRO  ## Checking for partial RELRO
   
 The following command should list a section called `RELRO`:  The following command should list a section called `RELRO`:
   
Line 161  The following command should list a sect Line 161  The following command should list a sect
     [...]      [...]
        RELRO off    0x0000000000000d78 vaddr 0x0000000000600d78 paddr 0x0000000000600d78 align 2**0         RELRO off    0x0000000000000d78 vaddr 0x0000000000600d78 paddr 0x0000000000600d78 align 2**0
   
   ## Checking for full RELRO
   
   The dynamic loader will apply RELRO immediately when detecting the presence of
   the `BIND_NOW` flag:
   
       $ objdump -x /path/to/bin/ary
   
       /path/to/bin/ary:     file format elf64-x86-64
   
       Dynamic Section:
       [...]
         BIND_NOW             0x0000000000000000
   
   This has to be combined with partial RELRO (see above) to be fully efficient.
   
 ## Checking for SSP  ## Checking for SSP
   
 Building objects, binaries and libraries with SSP will affect the presence of  Building objects, binaries and libraries with SSP will affect the presence of
Removed from v.1.12  
changed lines
  Added in v.1.13

CVSweb for NetBSD wikisrc <wikimaster@NetBSD.org> software: FreeBSD-CVSweb