Re: RFC: enable PAX aslr/mprotected and MKPIE=yes for ppc

["Frank Wille" <frank%phoenix.owl.de@localhost>]

On 2025-05-28, Martin Husemann <martin%duskware.de@localhost> wrote:

> enabled MKPIE=yes. This causes the binaries to grow slightly.
> [...]
> I propose to:
>
> a) add aslr and mprotect options the macppc GENERIC (and maybe other
> ppc kernels), see above for the exact config lines.
> b) enable MKPIE=yes by default for all ppc architectures

Although the binary growth is not excessive, and there is no noticeable
impact on performance, as far as understand, I would restrict it to
PPC ports which have some more RAM (like macppc or ofppc).

On older PPC systems, with limited memory (let's say 128 or 64MB),
every byte counts to avoid swapping, and security aspects are usually
no issue there.

Some years ago I ported lots of NAS systems (Synology, QNAP, etc.) to
NetBSD/sandpoint and I'm still using them to store my data. :)

NetBSD 10.0 (DS209J) #1: Mon Apr 28 18:15:10 CEST 2025
        frank@nerthus:/home/frank/netbsd/REL10.0/src/objsand/sys/arch/sandpoint/compile/DS209J
Model: synology DS209j
total memory = 65536 KB
avail memory = 58604 KB
OpenPIC Version 1.2: Supports 1 CPUs and 26 interrupt sources.
timecounter: Timecounters tick every 10.000 msec
Kernelized RAIDframe activated
mainbus0 (root)
cpu0 at mainbus0: 8245 (Revision 0.4), ID 0 (primary)
cpu0: HID0 0x90c000<DOZE,DPM,ICE,DCE>, powersave: 1
cpu0: 265.31 MHz
[...]

-- 
Frank Wille