I forgot to mention that hardening.pax.segvguard.status is a sysctl
node. To set it:
sysctl hardening.pax.segvguard.status=2
Or in /etc/sysctl.conf:
hardening.pax.segvguard.status=2
Thanks,
Shawn
On Fri, Aug 04, 2017 at 08:46:46AM -0400, Shawn Webb
wrote:> After booting HardenedBSD, set hardening.pax.segvguard.status=2. No
> configuration is necessary.
>
> Thanks,
>
> Shawn
>
> On Fri, Aug 04, 2017 at 05:15:51PM +0530, syed khalid wrote:
> > Hello Johannes/Shawn,
> >
> > Thanks for the information. I would like to experiment SEGVGUARD and I
> > would like to monitor the performance of the kernel in the context of
> > SEGVGUARD enabled for a single application. How do i enable or
configure
> > the SEGVGUARD service in HardenedBSD?
> >
> > Regards,
> > Syed
> >
> > On Thu, Aug 3, 2017 at 9:18 PM, Johannes Jost Meixner <
> > johannes at perceivon.net> wrote:
> >
> > > You'll want to checkout HardenedBSD[1], especially the
10-STABLE builds
> > > [2].
> > >
> > >
> > > [1] https://www.hardenedbsd.org
> > > [2]
> > >
http://jenkins.hardenedbsd.org/builds/HardenedBSD-10-STABLE-amd64-LATEST/
> > >
> > >
> > >
> > > Best regards,
> > >
> > > Johannes Meixner
> > >
> > >
> > > Perceivon O??
> > > Pikk 7-17
> > > 10123 Tallinn
> > >
> > > tel: +372 5855 1779
> > > web: http://www.perceivon.net
> > >
> > > On 08/03/2017 18:35, syed khalid wrote:
> > > > Hello All,
> > > >
> > > > I would like to configure SEGVGUARD for few critical
applications in
> > > > FreeBSD10 . Is is available natively in FreeBSD10 ?
> > > >
> > > > If so you could anyone help me in enabling/configuring
SEGVGUARD
> > > >
> > >
> > >
> >
> >
> > --
> > *Thanks & Regards*
> > *Syed Khalid M*
> > *Mobile No:+91-8148910714*
>
> --
> Shawn Webb
> Cofounder and Security Engineer
> HardenedBSD
>
> GPG Key ID: 0x6A84658F52456EEE
> GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE
--
Shawn Webb
Cofounder and Security Engineer
HardenedBSD
GPG Key ID: 0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL:
<http://lists.freebsd.org/pipermail/freebsd-security/attachments/20170804/6fb9060b/attachment.sig>