opnsense-src/sys/fs
Shawn Webb 654d6151ef
Introduce HardenedBSD's procfs hardening.
OPNsense doesn't use procfs by default, but in case users try to use it,
prevent an interesting attack where an attacker can abuse procfs to
modify application execution state.

This commit also introduces the PAX_HARDENING kernel option.

Signed-off-by:	Shawn Webb <shawn@opnsense.org>
2017-02-11 16:39:16 -05:00
..
autofs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
cd9660 src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
cuse src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
deadfs src: clean-cut move to 10.2-RELEASE 2015-08-14 14:15:00 +02:00
devfs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
ext2fs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
fdescfs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
fifofs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
fuse src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
msdosfs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
nandfs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
nfs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
nfsclient src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
nfsserver src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
nullfs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
procfs Introduce HardenedBSD's procfs hardening. 2017-02-11 16:39:16 -05:00
pseudofs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
smbfs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
tmpfs tmpfs: allow recurse as that does happen when using unionfs 2016-10-03 12:46:30 +02:00
udf src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
unionfs src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00