... | @@ -7,6 +7,18 @@ The following applications need special handling with respect to exploit mitigat |
... | @@ -7,6 +7,18 @@ The following applications need special handling with respect to exploit mitigat |
|
]
|
|
]
|
|
}
|
|
}
|
|
|
|
|
|
|
|
## graphics/xpdf
|
|
|
|
### Incompatibilities
|
|
|
|
* SHLIBRANDOM
|
|
|
|
|
|
|
|
### secadm rule
|
|
|
|
{
|
|
|
|
path: "/usr/local/bin/xpdf",
|
|
|
|
features: [
|
|
|
|
shlibrandom: false,
|
|
|
|
]
|
|
|
|
}
|
|
|
|
|
|
## www/chromium
|
|
## www/chromium
|
|
### Incompatibilities
|
|
### Incompatibilities
|
|
* PAGEEXEC
|
|
* PAGEEXEC
|
... | @@ -21,10 +33,24 @@ The following applications need special handling with respect to exploit mitigat |
... | @@ -21,10 +33,24 @@ The following applications need special handling with respect to exploit mitigat |
|
]
|
|
]
|
|
}
|
|
}
|
|
|
|
|
|
|
|
## www/firefox
|
|
|
|
### Incompatibilities
|
|
|
|
* PAGEEXEC
|
|
|
|
* MPROTECT
|
|
|
|
|
|
|
|
### secadm rule
|
|
|
|
{
|
|
|
|
path: "/usr/local/lib/firefox/firefox",
|
|
|
|
features: [
|
|
|
|
mprotect: false,
|
|
|
|
pageexec: false,
|
|
|
|
]
|
|
|
|
}
|
|
|
|
|
|
## www/kdepim
|
|
## www/kdepim
|
|
### Incompatibilities
|
|
### Incompatibilities
|
|
* /usr/local/bin/kmail: PAGEEXEC
|
|
* PAGEEXEC
|
|
* /usr/local/bin/kmail: MPROTECT
|
|
* MPROTECT
|
|
|
|
|
|
### secadm rule
|
|
### secadm rule
|
|
{
|
|
{
|
... | @@ -35,6 +61,19 @@ The following applications need special handling with respect to exploit mitigat |
... | @@ -35,6 +61,19 @@ The following applications need special handling with respect to exploit mitigat |
|
]
|
|
]
|
|
}
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
## www/privoxy
|
|
|
|
### Incompatibilities
|
|
|
|
* SHLIBRANDOM
|
|
|
|
|
|
|
|
### secadm rule
|
|
|
|
{
|
|
|
|
path: "/usr/local/sbin/privoxy",
|
|
|
|
features: [
|
|
|
|
shlibrandom: false,
|
|
|
|
]
|
|
|
|
}
|
|
|
|
|
|
## Java
|
|
## Java
|
|
### Incompatibilities
|
|
### Incompatibilities
|
|
* PAGEEXEC
|
|
* PAGEEXEC
|
... | | ... | |