Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
addressspacelayoutrandomization [2022/02/06 15:46] – ASLR has not been x86-only for years EdMasteaddressspacelayoutrandomization [2023/07/31 18:28] (current) – Mention this page is old EdMaste
Line 1: Line 1:
 +NOTE: this page was created while the patch was in development and served to record some information of interest to the developers. Some of the information is outdated.
 +
 ====== Address Space Layout Randomization (ASLR) ====== ====== Address Space Layout Randomization (ASLR) ======
  
-Support for Address Space Layout Randomization was added in %%FreeBSD%% HEAD (13-CURRENT) in [[https://svnweb.freebsd.org/changeset/base/343964|base r343964]]. It is enabled  by default in 14-CURRENT for 64bit architectures, as of [[https://cgit.freebsd.org/src/commit/sys/kern/imgact_elf.c?id=b014e0f15bc73d80ef49b64fd1f8c29f469467cb|base commit b014e0f15bc7]].+Support for Address Space Layout Randomization was added in %%FreeBSD%% HEAD (13-CURRENT) in [[https://svnweb.freebsd.org/changeset/base/343964|base r343964]]. It is enabled  by default in 14-CURRENT for 64bit architectures, as of [[https://cgit.freebsd.org/src/commit/sys/kern/imgact_elf.c?id=b014e0f15bc73d80ef49b64fd1f8c29f469467cb|base commit b014e0f15bc7]].  It is enabled by default for 64-bit architectures in %%FreeBSD%% 13.2 and later releases.
  
 ===== Architectures ===== ===== Architectures =====
Line 20: Line 22:
   * procctl(2) adds PROC_ASLR_CTL / PROC_ASLR_STATUS   * procctl(2) adds PROC_ASLR_CTL / PROC_ASLR_STATUS
   * NT_FREEBSD_FCTL_ASLR_DISABLE feature control note bit makes it possible to force ASLR off for the given binary. A tool to edit the feature control note is in development.   * NT_FREEBSD_FCTL_ASLR_DISABLE feature control note bit makes it possible to force ASLR off for the given binary. A tool to edit the feature control note is in development.
- 
-Application configurations: 
- 
-  * ntpd will segfault (usually but not always) when stack gap !=0. Either: 
-    * Set kern.elf64.aslr.stack_gap or kern.elf32.aslr.stack_gap (whichever is applicable to your system) to 0, or 
-    * Add ntpd_prepend="/usr/bin/proccontrol -m aslr -s disable" to rc.conf, or 
-    * If running ntpd by hand or one's own script, proccontrol -m aslr -s disable ntpd $ntpd_args 
  
 ---- ----
  • addressspacelayoutrandomization.1644162410.txt.gz
  • Last modified: 2022/02/06 15:46
  • by EdMaste