Some better news regarding to FreeBSD land: svnweb.freebsd.org/base?view… @paxteam @grsecurity
3
2
Replying to @zer0pntr @grsecurity
looks interesting, something we considered doing in around 2000/2001 but the (linux) world wasn't quite ready at the time. one question: does vm_map_protect(..., max_prot, TRUE) in kern_mprotect fail if max_prot were to add new rights? it had better... ;)

Jul 3, 2019 · 10:36 AM UTC

1
1
Replying to @paxteam @zer0pntr @grsecurity
Of course :) Same question came up in the code review, resulting in a clarification in the man page: svnweb.freebsd.org/base?view…
1
i see, though it still kinda only implies it since 'new_prot' can either be the new value for 'prot' or 'maxprot', doesn't make it easier on the reader ;). i'd have probably forked this into two separate functions setting prot/max_prot respectively instead of the bool selector...
1
more replies