patch to randomize mmap offsets

[Thomas E. Spanjaard]

Kevin L. Kane wrote:
I pulled this little patch from OpenBSD to randomize mmap offsets as
per request on projects page, described by
http://www.openbsd.org/papers/auug04/index.html
Given other comments, I think you should put all the changed code under 
an #ifdef, and add that to conf/options to be defined in file opt_vm.h 
(e.g., VM_MMAPOFF_RANDOMIZE opt_vm.h), then include opt_vm.h in the 
relevant files. Ofcourse, the option wouldn't be enabled by default, but 
people who want security through obscurity can easily enable it at their 
leasure in their kernel config, and recompile :).

Cheers,
--
        Thomas E. Spanjaard
        tgen at netphreax.net
Attachment:
signature.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pgp00005.pgp
Type: application/octet-stream
Size: 186 bytes
Desc: "Description: OpenPGP digital signature"
URL: <http://lists.dragonflybsd.org/pipermail/submit/attachments/20070116/995d4e4a/attachment-0014.obj>