HardenedBSD-10-STABLE-v29

• fixed pkg repo issues

HardenedBSD-11-CURRENT-v28.3

• fixed the newest FreeBSD SAs:
  • https://security.freebsd.org/advisories/FreeBSD-SA-15:19.routed.asc
  • https://security.freebsd.org/advisories/FreeBSD-SA-15:18.bsdpatch.asc
• fixed a build error with disabled ASLR

HardenedBSD-10-STABLE-v28

• rewritten and enhanced ASLR
  • rewritten mmap randomization
  • rewritten stack randomization, from this version we deliver a true stack randomization which replaces the previous gap based stack randomization
  • added vdso randomization
• changed ASLR settings
  • exec base: 21 -> 30 bits
  • mmap: 30 bits
  • stack: 26 -> 42 bits
  • vdso: 0 -> 20 bits
• fixed the newest FreeBSD SAs:
  • https://security.freebsd.org/advisories/FreeBSD-SA-15:19.routed.asc
  • https://security.freebsd.org/advisories/FreeBSD-SA-15:18.bsdpatch.asc
• disabled freebsd-update command from build
• various typo fixes
• updated kernel configs:
  • disabled COMPAT_FREEBSD[456]
  • disabled COMPAT_FREEBSD32
  • added UFS_EXTATTR_AUTOSTART
• added HardenedBSD binary pkg repo to /etc/pkg
• added more tools to PIE build
• added recursive support to setfacl(1)

HardenedBSD-11-CURRENT-v28.1

• FreeBSD SA15:13.tcp

HardenedBSD-10-STABLE-v23.3

• FreeBSD SA15:13.tcp

HardenedBSD-11-CURRENT-v28

• vdso fixes
• typo fixes

HardenedBSD-11-CURRENT-v27.1

• stack randomization fix for ARM
• OpenSSL 1.0.1p

HardenedBSD-10-STABLE-v23.2

• OpenSSL 1.0.1p

HardenedBSD-11-CURRENT-v27

• added shared-page (VDSO) randomization

HardenedBSD-11-CURRENT-v26

• rewritten ASLR - true stack randomization
• fixed iso generation
• updated pkg settings
• added missing WANTS_PIE to some base system's program (daemon, bhyve*, ...)
• fixed aslr documentation
• added -HBSD postfix to version string in uname
• fixed information string, when secadm rules exists
• fixed MIPS aslr