Table of Contents
Owl security features
Kernel
Strong password cryptography
What does this have to do with the kernel?
Network address based access control
Integrity checking
Address Space Layout Randomisation (ASLR)
Stack ASLR
...
NX bit
Mmap min address protection
Module loading
Userland
Source code review
Privileges
Configuration and administration facilities
====
GCC and glibc features
Stack Protector
Heap Protector
Non-Executable Memory
Fromat security
Fortify source
Position Independent Executable (PIE)
Relro and bind now
Owl packages built with these GCC features
| Packages | Fortify | Stack protector | PIE | Relro | Full relro |
|---|---|---|---|---|---|
| Pkg1 |
Use the checksec.sh shell script to check the mitigation techniques that are built on binaries. This script can also check some Linux kernel protection mechanisms.