Commit Graph

19 Commits

Author SHA1 Message Date
wiz
1791473d2b Make HTML-ready. 2009-05-18 14:58:14 +00:00
elad
563e80a1ee Fix mistake in the Veriexec example, the command name is "veriexecctl",
not "veriexec".
2009-01-26 13:23:20 +00:00
elad
52cf460a76 Following input from Matthew Mondor, some Veriexec documentation changes:
- Document the signatures file format in a veriexec(5) man-page,
  - Document the strict levels and a general Veriexec intro in veriexec(8)
    instead of security(8).

Okay blymn@.
2008-02-18 10:37:19 +00:00
elad
d0431ebd34 Document PaX ASLR.
Also requested by xtraeme@.
2007-12-27 00:40:54 +00:00
elad
83ec1c0544 Better intro to exploit mitigation features, also add a TOC for it. 2007-02-08 00:38:27 +00:00
elad
5e2e282f9c Add support for per-user /tmp.
Enabled via per_user_tmp in /etc/rc.conf (default off).

See security(8) and rc.conf(5) for more details.

Lots of input from thorpej@ & christos@, thanks!
2007-02-04 08:19:26 +00:00
elad
319fb82387 paxctl(1) -> paxctl(8), add "table of contents". 2007-02-02 02:42:00 +00:00
wiz
a6b4bc9d66 Do not give Nx arguments it does not understand. 2007-01-23 22:24:30 +00:00
elad
d2e4f7167b Remove advertising clause from all of my stuff. 2007-01-09 12:49:36 +00:00
elad
7e1cc3fd07 Elaborate on SSP.
Requested by and okay wiz@.
2006-12-26 10:24:53 +00:00
rumble
f87f55890b Potentially futile attempt to avoid wizd. 2006-12-24 21:51:28 +00:00
rumble
91ea8ec96b Fix a few typos and tweak the grammar slightly. Move the disabling PaX
MPROTECT section to directly follow instructions on enabling it. Be
consistent in stating that Segvguard works on a per-program, per-user
basis.
2006-12-24 21:50:09 +00:00
elad
6d74a5fdc7 Document Veriexec strict levels (hm, maybe we should have veriexec(8)?)
as requested by Adam Hamsik.
2006-11-23 13:23:22 +00:00
elad
eb704f9789 SSP is not enabled by default, update documentation.
Pointed out by yamt@, thanks!
2006-11-22 13:00:02 +00:00
elad
a84fee7faf Initial implementation of PaX Segvguard (this is still work-in-progress,
it's just to get it out of my local tree).
2006-11-22 02:02:51 +00:00
elad
7372f1dad4 oops, remove junk. 2006-10-31 02:06:30 +00:00
elad
5a11382d8e Sync with reality. 2006-10-31 01:59:12 +00:00
wiz
6acb9c2f08 Fix typos, improve markup. 2006-10-26 12:47:30 +00:00
elad
db3faefa96 First shot at a security(8) man-page, a quick guide for some NetBSD
security features.
2006-10-22 12:16:27 +00:00