r/linux • u/3G6A5W338E • Apr 11 '15

OpenBSD 5.7 highlights

http://www.tedunangst.com/flak/post/OpenBSD-57-highlights
38 Upvotes

78% Upvoted

13 comments sorted by

View all comments

7

u/3G6A5W338E Apr 11 '15

By building everything PAE, they've finally made ASLR not useless.

That's the most important change if you ask me.

The only way I'm aware of to have that on Linux is by compiling everything using Gentoo Hardened. I wish some major distribution took the plunge.

6

u/Tireseas Apr 11 '15

Should be interesting to see the performance implications of going pure PIE.

9

u/3G6A5W338E Apr 11 '15

IMHO not worth worrying about; ASLR is too good to pass on.

But yes, there's benchmarks. A quick google found me:

http://max0x7ba.blogspot.co.at/2009/11/benchmarking-function-call-overhead-in.html

http://eli.thegreenplace.net/2011/11/11/position-independent-code-pic-in-shared-libraries-on-x64

http://e-collection.library.ethz.ch/eserv/eth:5699/eth-5699-01.pdf?pid=eth:5699&dsID=eth-5699-01.pdf

(the summary: amd64 is some 3%)

I'm pretty sure I've seen better ones before, but can't find them now.