Is there any work towards enabling pointer authentication on OpenBSD? Could not find anything about it.

Pointer Authentication is a security mitigation technique against the return-oriented programming (ROP) and jump-oriented programming (JOP) attacks:

https://events.static.linuxfound.org/sites/events/files/slides/slides_23.pdf

@openbsdnow It is available I think. See pac-plt on ld(1)¹ It is AArch64 only though ²

¹ https://man.openbsd.org/ld
² https://llvm.org/docs/PointerAuth.html#aarch64-support

ld(1) - OpenBSD manual pages

@ac yeah, but it is a support in toolchain, not in OpenBSD binaries, right? `pac-plt` is not used in building base.

@openbsdnow It is certainly not set in the default flags and I could not spot it in Makefile.arm64¹ so I guess not yet.

¹https://github.com/openbsd/src/blob/master/sys/arch/arm64/conf/Makefile.arm64

Commits · openbsd/src

Read-only git conversion of OpenBSD's official CVS src repository. Pull requests not accepted - send diffs to the tech@ mailing list. - Commits · openbsd/src

GitHub