diff options
| author | Theo Buehler <tb@cvs.openbsd.org> | 2017-05-30 12:04:28 +0000 |
|---|---|---|
| committer | Theo Buehler <tb@cvs.openbsd.org> | 2017-05-30 12:04:28 +0000 |
| commit | ed8d7b6c0d026641f5db2203f25c7c304b48b2ce (patch) | |
| tree | dd2ae4a7f9163fbd925bb5ec305de479f5a4855c /share | |
| parent | d0ddb828d8c00e8df2e6e601f9b737eec0f8b7f5 (diff) | |
Introduce a scary rc.conf(8) knob library_aslr=(YES|NO) to turn off the
reordering of libraries by rc(8). This way machines with very slow disk I/O
have a chance of booting within reasonable time now that libcrypto is also
randomized.
Discussed with various;
input & ok from deraadt ajacoutot
Diffstat (limited to 'share')
| -rw-r--r-- | share/man/man8/rc.conf.8 | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/share/man/man8/rc.conf.8 b/share/man/man8/rc.conf.8 index af34c8de9e1..5a2df20649a 100644 --- a/share/man/man8/rc.conf.8 +++ b/share/man/man8/rc.conf.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: rc.conf.8,v 1.28 2015/12/05 21:35:46 jmc Exp $ +.\" $OpenBSD: rc.conf.8,v 1.29 2017/05/30 12:04:27 tb Exp $ .\" .\" Copyright (c) 1997 Ian F. Darwin .\" Copyright (c) 2014 Ingo Schwarze <schwarze@openbsd.org> @@ -28,7 +28,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd $Mdocdate: December 5 2015 $ +.Dd $Mdocdate: May 30 2017 $ .Dt RC.CONF 8 .Os .Sh NAME @@ -139,6 +139,8 @@ rc calls: rc calls: .Xr ipsecctl 8 .Fl f Pa /etc/ipsec.conf +.It Cm library_aslr +rc reorders some libraries for improved protection against ROP. .It Cm multicast See .Xr netstart 8 . |