RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-27 08:27:46 +00:00
Code Issues Activity Actions

man: Add "-z seperate-code" to man7/Mitigations.md

Browse source 
Update the mitigations documentation with the lateest mitigation.
This commit is contained in:
Brian Gianforcaro 2021-09-27 19:08:52 -07:00 • committed by Andreas Kling
parent afb09e84db
commit 8fcdc255ff
1 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
Base/usr/share/man/man7/Mitigations.md
View file

@ -272,6 +272,21 @@ Date: Fri Jul 23 00:42:54 2021 -0700
Kernel: Reduce useful ROP gadgets by zeroing used function registers
```
### Linking with "separate-code"
The linker is passed the `seperate-code` option, so it won't combine read-only data
and executable code. This reduces the total amount of executable pages in the system.
It was first enabled in the following [commmit](https://github.com/SerenityOS/serenity/commit/fac0bbe739154abb416526bdc983487c05ba0c81):
```
commit fac0bbe739154abb416526bdc983487c05ba0c81
Author: Andreas Kling <kling@serenityos.org>
Date: Tue Aug 31 16:08:11 2021 +0200
Build: Pass "-z separate-code" to linker
```
## See also
* [`unveil`(2)](../man2/unveil.md)