Re: Solo5 security features

[Adam Steen <adam@xxxxxxxxxxxxxxxx>]

Looking at the tests 
https://github.com/Solo5/solo5/blob/master/tests/tests.bats#L345-L386

Solo5 on OpenBSD Supports
- read not write (rnow)
- W^X (xnow, wnox)
- excuse no read (xnor)
- read no excute (rnox)

Cheers
Adam


On Friday, 19 January 2024 at 00:14, Joe <joe@xxxxxxx> wrote:

> On 1/2/24 21:29, Thomas Gazagnaire wrote:
> 
> > Hey there,
> > 
> > Do we have an up-to-date table of the defense-in-depth security features 
> > enforced by solo5 on the different targets?
> > 
> > So far I found:
> > - W^X: https://github.com/Solo5/solo5/issues/303 -> not sure exactly where 
> > this is enforced nowadays. The tests in 
> > https://github.com/Solo5/solo5/pull/363/files seems to say that this only 
> > works on spt?
> 
> 
> https://github.com/Solo5/solo5/pull/447/files looks like hvt_openbsd
> also supports this.
> 
> Also of note:
> https://github.com/Solo5/solo5/blob/master/tenders/hvt/hvt_freebsd.c#L138
> 
> https://github.com/Solo5/solo5/blob/master/tenders/hvt/hvt_freebsd.c#L197-L227
> 
> https://github.com/Solo5/solo5/blob/master/tenders/hvt/hvt_kvm.c#L143-L144
>