Re: Security and PAX

[christos%astron.com@localhost (Christos Zoulas)]

In article <20150606142015.GA61273%nordend.local.sourire.ch@localhost>,
 <rhino64%epost.ch@localhost> wrote:
>Hi,
>  I am quite new to netbsd and I am curious about 
>the security mechanisms available.
>
>In the security page "http://www.netbsd.org/support/security/";,
>I can see that the PaX module is used in the kernel
>but without any other information.
>
>What should be done in order to use (and perhaps configure)
>that feature?
>
>Sould the executables being compiled with the "-fpie" option?
>
>Any comment would be greatly appreciated?

$ man 7 sysctl look for pax
$ man paxctl

To use ASLR effectively you need to build with MKPIE...

christos