Module Name: src
Committed By: martin
Date: Fri Mar 24 08:18:27 UTC 2017
Modified Files:
src/tests/lib/libc/sys: t_mprotect.c
Log Message:
Do not toggle global security.pax.mprotect state in an attempt to
activate it for the current process. It does not work and tests should
not change global system state anyway.
Instead: skip the test is pax.mprotect is not globally enabled. We
could use a better check for this (querying the current processes pax
flags), but unfortunately we don't have one.
I'll be committing a new sysctl variable proc.curproc.paxflags which will provide the ability to quest the current process's pax flags (or, indeed, the pax flags for any process which the caller is "allowed to see").
+------------------+--------------------------+------------------------+ | Paul Goyette | PGP Key fingerprint: | E-mail addresses: | | (Retired) | FA29 0E3B 35AF E8AE 6651 | paul at whooppee.com | | Kernel Developer | 0786 F758 55DE 53BA 7731 | pgoyette at netbsd.org | +------------------+--------------------------+------------------------+