I believe this may be the first #FreeBSD HEAD snapshot build since their partial address space randomization patch landed.
Quote Tweet
New #FreeBSD 13-CURRENT #snapshots available:
lists.freebsd.org/pipermail/free
2
4
8
Conversation
Replying to
How incomplete is their implementation? It's pretty sad that they're only getting this now and without a high quality full implementation as you've done for it in HardenedBSD. It's such an old security feature at this point and the state of the art has come so far from that.
Replying to
It lacks stack and shared page randomization. It also differs from the PaX design by not using deltas, so it's not really ASLR but ASR.
The missing stack randomization makes it a rather expensive NO-OP from a security perspective.
1