Page MenuHomeFreeBSD

mitigations.7: briefly describe Stack Smashing Protection (SSP)
ClosedPublic

Authored by emaste on Jun 1 2024, 12:08 PM.
Tags
None
Referenced Files
F102960643: D45435.id139302.diff
Tue, Nov 19, 5:41 AM
Unknown Object (File)
Mon, Nov 11, 3:10 AM
Unknown Object (File)
Sun, Nov 10, 9:24 AM
Unknown Object (File)
Sat, Nov 9, 9:20 AM
Unknown Object (File)
Fri, Nov 8, 7:12 PM
Unknown Object (File)
Fri, Nov 8, 5:06 PM
Unknown Object (File)
Tue, Nov 5, 9:25 AM
Unknown Object (File)
Tue, Nov 5, 8:59 AM
Subscribers

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

emaste created this revision.

I'm not sure what makes the most sense for documenting SSP (between this man page and security.7) but there should at least be a reference here.

I'm not sure what makes the most sense for documenting SSP (between this man page and security.7) but there should at least be a reference here.

Oh, hmm, I didn't realize we had this. Looking at the two, I guess it'd make the most sense to just lift the SSP section out of security(7) into mitigations(7), though I think it'd be good to add a more explicit pointer in security(7) to mitigations(7) than just an xref in the SEE ALSO section.
Maybe something like:

For more information on specific vulnerability mitigations implemented in
.Fx ,
see
.Xr mitigations 7 .

Move security.7 SSP description to mitigations.7

Rename section to more generic "stack overflow protection", the section name from security.7

share/man/man7/security.7
44–51

(This intro is extremely dated, and security.7 really needs a holistic rewrite.)

This looks reasonable to me, thanks!

This revision is now accepted and ready to land.Jun 1 2024, 2:56 PM