From 8fcdc255fff916efcc3756208610ac6346dbfc4b Mon Sep 17 00:00:00 2001 From: Brian Gianforcaro Date: Mon, 27 Sep 2021 19:08:52 -0700 Subject: [PATCH] man: Add "-z seperate-code" to man7/Mitigations.md Update the mitigations documentation with the lateest mitigation. --- Base/usr/share/man/man7/Mitigations.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/Base/usr/share/man/man7/Mitigations.md b/Base/usr/share/man/man7/Mitigations.md index a158177157..fc9a1c7dcd 100644 --- a/Base/usr/share/man/man7/Mitigations.md +++ b/Base/usr/share/man/man7/Mitigations.md @@ -272,6 +272,21 @@ Date: Fri Jul 23 00:42:54 2021 -0700 Kernel: Reduce useful ROP gadgets by zeroing used function registers ``` +### Linking with "separate-code" + +The linker is passed the `seperate-code` option, so it won't combine read-only data +and executable code. This reduces the total amount of executable pages in the system. + +It was first enabled in the following [commmit](https://github.com/SerenityOS/serenity/commit/fac0bbe739154abb416526bdc983487c05ba0c81): + +``` +commit fac0bbe739154abb416526bdc983487c05ba0c81 +Author: Andreas Kling +Date: Tue Aug 31 16:08:11 2021 +0200 + +Build: Pass "-z separate-code" to linker +``` + ## See also * [`unveil`(2)](../man2/unveil.md)