diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2022-08-29 17:00:31 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2022-08-29 17:00:31 +0000 |
| commit | 8568212eb4373d0dd74b5fa502aad4add539023f (patch) | |
| tree | d00b0f3f83982f3eb12558ebd8375dbe6679d9bd /sbin/slaacd | |
| parent | f2fdbdd7af357185a67b8758bf9361a0620796f7 (diff) | |
Dynamically link these /sbin daemons: dhcpleased, mountd, nfsd, pflogd,
resolvd, slaacd, unwind.
The mitigation story is way better: syscalls are in a randomly located
libc, and every syscall stub is randomly located inside that due to
random relinking. As opposed to fixed offset inside a release binary.
There is one known consequence: /usr nfs mounting must use statically
configured IP addresses.
ok kettenis florian, others
Diffstat (limited to 'sbin/slaacd')
| -rw-r--r-- | sbin/slaacd/Makefile | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/sbin/slaacd/Makefile b/sbin/slaacd/Makefile index 84fa0be5b2c..f158a98afba 100644 --- a/sbin/slaacd/Makefile +++ b/sbin/slaacd/Makefile @@ -1,4 +1,4 @@ -# $OpenBSD: Makefile,v 1.2 2019/11/07 08:45:31 florian Exp $ +# $OpenBSD: Makefile,v 1.3 2022/08/29 17:00:30 deraadt Exp $ PROG= slaacd SRCS= control.c engine.c frontend.c log.c slaacd.c @@ -17,3 +17,6 @@ LDADD+= -levent -lutil DPADD+= ${LIBEVENT} ${LIBUTIL} .include <bsd.prog.mk> + +# Don't compile slaacd as static binary by default +LDSTATIC= |