ASLR for golang on OpenBSD

Hello! Here is a patch that lets you use `go build -buildmode=pie file.go` to compile golang binaries on OpenBSD and get ASLR. By default all the golang binaries compiled on openbsd are not randomized, only linux and android have that feature. This patch is against go1.8.3.src.tar.gz dif

Fwd: Re: Creating a blog using OpenBSD: technology choices and security considerations

On 2016-04-26 14:24, Kamil Cholewiński wrote: On Tue, 26 Apr 2016, ra...@openmailbox.org wrote: If you want to make a dynamic "web application" then consider using ur/web [1]. The programming language itself protects against SQL injection, XSS attacks, CSRF attacks. I hate to bring the bad new

Re: Creating a blog using OpenBSD: technology choices and security considerations

On 2016-04-26 10:03, Rubén Llorente wrote: On Tue, 26 Apr 2016 06:15:22 +, David Lou wrote: When I say 'blog', I'm referring to a website that contains essentially many pages of content. Each content page has attributes such as title, date, category, tags, and so on. When a user browsers t

pledging fork?

I'm having a problem with pledge on openbsd #include void main(void) { pledge("proc", NULL); fork(); } when I run this I get: Program received signal SIGABRT, Aborted. 0x05f7309c70ba in mprotect () at :2 here is a backtrace #0 0x05f7309c70ba in mprotect () at :2 #1 0x05f7309c6c