Re:FreeBSD – A lesson in poor defaults
by ianai on Friday July 05, 2019 @02:34PM
(#20364695)
I fear this piece is being taken as a “hit piece” when it should be taken as an aid in hardening a FreeBSD box.
[ Parent
| on HN ]
Well, the delays in adding ASLR and W^X (have the added W^X yet?) aren't something you can work around by hardening.
Despite my sibling post to yours I think it's a good point. This https://forums.freebsd.org/threads/no-aslr-upstreaming.54771... has some content that may be of historical interest as to the why the ASLR delays (I can't speak to W^X). Going forward ASLR may take no more than another boot time knob twiddle https://wiki.freebsd.org/ASLR to add to OP .
It's both. There's a lot of prose questioning the intent and competency of FreeBSD developers. The addendum for instance smarmily suggests that the PTI patch had no review at all when it certainly did and the referenced post even contains a link to that review.