{"id":1197088,"date":"2023-10-27T11:31:16","date_gmt":"2023-10-27T15:31:16","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1197088"},"modified":"2023-10-27T11:31:16","modified_gmt":"2023-10-27T15:31:16","slug":"removing-syscall-from-openbsd","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1197088","title":{"rendered":"Removing syscall() from OpenBSD"},"content":{"rendered":"<p>For a view into the OpenBSD approach to security, see this message from<br \/>\nTheo de Raadt, where he describes a plan to remove the <a href=\"https:\/\/man.openbsd.org\/syscall.2\"><tt>syscall()<\/tt><\/a> system call<br \/>\n(which allows the invocation of any available system call by providing its<br \/>\nnumber) from the kernel.  The purpose, of course, is to make it harder for<br \/>\nan attacker to invoke an arbitrary system call, even if they are able to<br \/>\nrun some code on the target system.\n<\/p>\n<\/p>\n<blockquote class=\"bq\"><p>\n\t I hope I am forcing attack coders into using increasingly more<br \/>\n\t complicated methods. Same time, it means fewer methods are<br \/>\n\t available.  Other methods make exploitation more fragile.  This is<br \/>\n\t pushing success rates into &#8220;low-percent statistical&#8221; success. If<br \/>\n\t we teach more software stacks to &#8220;fail hard, don&#8217;t try to<br \/>\n\t recover&#8221;, that is an improvement in security.\n<\/p><\/blockquote>\n<p>&#013;<br \/>\n&#013;<br \/>\nSource: LWN.net &#8211; <a href=\"https:\/\/lwn.net\/Articles\/949078\/\" target=\"_blank\" rel=\"noopener\">Removing syscall() from OpenBSD<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>For a view into the OpenBSD approach to security, see this message from Theo de Raadt, where he describes a plan to remove the syscall() system call (which allows the invocation of any available system call by providing its number) &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=1197088\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[72],"tags":[75],"class_list":["post-1197088","post","type-post","status-publish","format-standard","hentry","category-linux","tag-linux"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1197088","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1197088"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1197088\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1197088"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1197088"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1197088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}