From 8568212eb4373d0dd74b5fa502aad4add539023f Mon Sep 17 00:00:00 2001 From: Theo de Raadt Date: Mon, 29 Aug 2022 17:00:31 +0000 Subject: Dynamically link these /sbin daemons: dhcpleased, mountd, nfsd, pflogd, resolvd, slaacd, unwind. The mitigation story is way better: syscalls are in a randomly located libc, and every syscall stub is randomly located inside that due to random relinking. As opposed to fixed offset inside a release binary. There is one known consequence: /usr nfs mounting must use statically configured IP addresses. ok kettenis florian, others --- sbin/slaacd/Makefile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'sbin/slaacd') diff --git a/sbin/slaacd/Makefile b/sbin/slaacd/Makefile index 84fa0be5b2c..f158a98afba 100644 --- a/sbin/slaacd/Makefile +++ b/sbin/slaacd/Makefile @@ -1,4 +1,4 @@ -# $OpenBSD: Makefile,v 1.2 2019/11/07 08:45:31 florian Exp $ +# $OpenBSD: Makefile,v 1.3 2022/08/29 17:00:30 deraadt Exp $ PROG= slaacd SRCS= control.c engine.c frontend.c log.c slaacd.c @@ -17,3 +17,6 @@ LDADD+= -levent -lutil DPADD+= ${LIBEVENT} ${LIBUTIL} .include + +# Don't compile slaacd as static binary by default +LDSTATIC= -- cgit v1.2.3