{"id":105272,"date":"2022-10-09T09:37:09","date_gmt":"2022-10-09T07:37:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov"},"modified":"2022-10-09T09:37:09","modified_gmt":"2022-10-09T07:37:09","slug":"v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","title":{"rendered":"Changes have been accepted in OpenBSD for additional protection of process memory.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Theo de Raadt has added a series of patches to the OpenBSD codebase for extra protection of process memory in user space. Developers are offered a new system call and its eponymous library function mimmutable, which allows for the locking of access rights during memory mappings. Once locked, the rights set for the memory area, such as a prohibition on writing and execution, cannot be altered through subsequent calls to the mmap(), mprotect(), and munmap() functions, which will return an EPERM error when modification is attempted. <\/p>\n
To manage the ability to change the permissions of reflected memory for object files, a new section called Mutable BSS (.openbsd.mutable, Mutable Block Starting Symbol) has been proposed, along with new flags PF_MUTABLE and UVM_ET_IMMUTABLE. The linker has been enhanced to support the definition of sections named 'openbsd.mutable' and to place them in a separate area within the BSS, aligned to page boundaries in memory. Through the function call mimmutable, it is possible to mark all reflected areas as immutable, except for those sections marked as 'openbsd.mutable'. This new feature will be made available to users in the OpenBSD 7.3 release. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"