This status report includes January, since I missed publishing January's report. The last couple months have been busy, with progress being made on multiple fronts. In the src tree: PaX SEGVGUARD is now integrated with Capsicum. Capsicum violations now count against the process when the kern.trap_enotcap sysctl tunable is set. This feature was inspired by conversations with alip from Syd Linux. A new sysctl tunable (hardening.elf_pie_only) was created to control whether non-PIE ELF executable...
