CVSROOT: /cvs Module name: src Changes by: dera...@cvs.openbsd.org 2016/05/30 15:31:30
Modified files: sys/sys : exec.h proc.h sys/kern : exec_elf.c kern_exec.c sys/uvm : uvm_mmap.c Log message: Identify W^X labelled binaries at execve() time based upon WX_OPENBSD_WXNEEDED flag set by ld -zwxneeded. Such binaries are allowed to run only on wxallowed mountpoints. They do not report mmap/mprotect problems. Rate limit mmap/mprotect reports from other binaries. These semantics are chosen to encourage progress in the ports ecosystem, without overwhelming the developers who work in the area. ok sthen kettenis