[src/trunk]: src/sys/arch/i386/conf Turn on PaX ASLR/MPROTECT

[christos <christos%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/d26b0a94d01e
branches:  trunk
changeset: 345340:d26b0a94d01e
user:      christos <christos%NetBSD.org@localhost>
date:      Fri May 20 01:37:47 2016 +0000

description:
Turn on PaX ASLR/MPROTECT

diffstat:

 sys/arch/i386/conf/GENERIC |  11 +++++++----
 1 files changed, 7 insertions(+), 4 deletions(-)

diffs (29 lines):

diff -r e13a03a8a17f -r d26b0a94d01e sys/arch/i386/conf/GENERIC
--- a/sys/arch/i386/conf/GENERIC        Fri May 20 01:36:16 2016 +0000
+++ b/sys/arch/i386/conf/GENERIC        Fri May 20 01:37:47 2016 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: GENERIC,v 1.1135 2016/04/23 10:15:29 skrll Exp $
+# $NetBSD: GENERIC,v 1.1136 2016/05/20 01:37:47 christos Exp $
 #
 # GENERIC machine description file
 #
@@ -22,7 +22,7 @@
 
 options        INCLUDE_CONFIG_FILE     # embed config file in kernel binary
 
-#ident                 "GENERIC-$Revision: 1.1135 $"
+#ident                 "GENERIC-$Revision: 1.1136 $"
 
 maxusers       64              # estimated number of users
 
@@ -1713,5 +1713,8 @@
 options        VERIFIED_EXEC_FP_SHA1
 options        VERIFIED_EXEC_FP_MD5
 
-options        PAX_MPROTECT=0          # PaX mprotect(2) restrictions
-options        PAX_ASLR=0              # PaX Address Space Layout Randomization
+options        PAX_ASLR_DEBUG=1        # PaX ASLR debug
+options        PAX_SEGVGUARD=0         # PaX Segmentation fault guard
+options        PAX_MPROTECT=1          # PaX mprotect(2) restrictions
+options        PAX_MPROTECT_DEBUG=1    # PaX mprotect debug
+options        PAX_ASLR=1              # PaX Address Space Layout Randomization