On Wed, Mar 09, 2016 at 10:21:42AM -0700, Brett Glass wrote: > ASLR is controversial. Some see it as "security by obscurity;" others see > it as extremely useful and effective. > > Yes, I would like it as a kernel build option, so that I can choose to > optimize for raw speed (e.g. on a server which is hardened in other ways) > or for the extra warm fuzzies that ASLR provides.
The great thing is that our implementation comes as a kernel build option, just like you want. Our implementation also works on a per-jail basis. Thanks, -- Shawn Webb HardenedBSD GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE
signature.asc
Description: PGP signature