PAX: fix SEGVUARD initialization and move the check pax flags in pax_elf instead of pax_get_flags

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX ASLR: rename pax_get_status to pax_aslr_get_status

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX: big refactor part I.

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX: refactor - drop FORCE from MBI_FORCE_*

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX: drop unused ELF_NOTE_TYPE_PAX_TAG define

op@hardenedbsd hardenedBSD.git.opntr> git grep ELF_NOTE_TYPE_PAX_TAG
sys/sys/pax.h:#define ELF_NOTE_TYPE_PAX_TAG   3

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX: added some debug message

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX ASLR: refactor - simplify code

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX SEGVGUARD: added status validator / parser

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX SEGVGUARD: refactor

note: vnode checking!!!!

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX: cleanup sys/pax.h and reorded function prototypes

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX: rework flags handling

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX: use prison_{,un}lock(pr) instead of mtx_{,un}lock(&(pr->pr_mtx))

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
HBSD LOG: validate tunables and standardize syslog outputs

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX SEGVGUARD: drop vnode parameters

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX SEGVGUARD: optimize pax_segvguard_active, fixed prison locking, ...

query segvguard status and suid only at exec/creation time

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX ASLR: truely rename pax_aslr_setup_flags and micro optimze

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX SEGVGUARD: validate pax_segvguard_debug tunable on boot

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX SEGVGUARD: fix case if SEGVUARD opt-in and suid or sgid

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX SEGVGUARD: fix typo

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX ASLR: fix build

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>