opensourcemirror
/
opnsense-src
mirror of https://github.com/opnsense/src.git
1
0
Fork 0
Code Issues Releases Wiki Activity

HBSD: Enable SEGVGUARD by default 

HardenedBSD still has SEGVGUARD in opt-in mode by default. OPNsense
needs to have this as opt-out by default.

Signed-off-by:	Shawn Webb <shawn@opnsense.org>
This commit is contained in:
Shawn Webb 2018-11-04 18:35:44 -05:00 committed by Franco Fichtner
parent c506f2d16f
commit b69494cefd
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sys/hardenedbsd/hbsd_pax_segvguard.c
View File

@ -62,7 +62,7 @@ __FBSDID("$FreeBSD$");
FEATURE(hbsd_segvguard, "Segmentation fault protection.");
#ifdef PAX_HARDENING
static int pax_segvguard_status = PAX_FEATURE_OPTIN; /* XXXOP */
static int pax_segvguard_status = PAX_FEATURE_OPTOUT; /* XXXOP */
#else
static int pax_segvguard_status = PAX_FEATURE_OPTIN;
#endif