One Reply to “NX on by default for reads”

1. >Suggested-by: Theo de Raadt

   Nice to see some cooperation between BSDs. My understanding is that NX helps prevents attackers doing ROP, but indeed it might not work nicely with JIT compilers used by many languages (which is why it’s more difficult to do NX on writeable pages, since that’s what JIT compilers use).

Comments are closed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)

URL/Permalink of your article