Open Information Security Foundation

01/19/2016

10:42 PM Suricata Bug #1672: Suricata Creates RWX Pages

Attached is new procstat output showing no RWX pages in Suricata now. Shawn Webb

10:40 PM Suricata Bug #1672: Suricata Creates RWX Pages

I've come up with a patch (which has been attached) to HardenedBSD's RTLD that fixes the problem. Long explanation fr... Shawn Webb

01/18/2016

12:11 PM Suricata Bug #1672: Suricata Creates RWX Pages

The threading library in FreeBSD (libthr) is another place that can create executable stacks. This is driven by the R... Shawn Webb

11:40 AM Suricata Bug #1672: Suricata Creates RWX Pages

FreeBSD's RTLD will request on behalf of a shared object executable stack pages if that shared object has a .GNU_STAC... Shawn Webb

01/17/2016

10:00 AM Suricata Bug #1672 (Closed): Suricata Creates RWX Pages

This bug may be due to a shared library that Suricata brings in. During Shmoocon, I talked with Victor about this a l... Shawn Webb

01/13/2016

07:34 AM Suricata Feature #1527: Add ability to compile as a Position-Independent Executable (PIE)

Alexander Gozman wrote:
> Shawn Webb wrote:
> > After testing this on HardenedBSD, it looks like I still get a link... Shawn Webb

01/12/2016

04:21 PM Suricata Bug #1668: Position-Independent Executable (PIE) Support on HardenedBSD

Disregard this issue. I was being too aggressive with the CFLAGS. Removing the pie USES flag allows compilation as a ... Shawn Webb

04:13 PM Suricata Bug #1668 (Closed): Position-Independent Executable (PIE) Support on HardenedBSD

It seems that attempting to compile as a PIE on HardenedBSD (and likely FreeBSD) causes linking errors. Attached is a... Shawn Webb

07:40 AM Suricata Feature #1527: Add ability to compile as a Position-Independent Executable (PIE)

After testing this on HardenedBSD, it looks like I still get a linking error, even after enabling --enable-pie. Log i... Shawn Webb

09/28/2015

04:17 PM Suricata Feature #1527: Add ability to compile as a Position-Independent Executable (PIE)

Alexander Gozman wrote:
> Something's wrong with CFLAGS, -fPIC should solve the problem: https://github.com/inliniac... Shawn Webb