Stack Protector (PaX) for FreeBSD

[bryn1u]

'm going to make other server with full ssh options for users. I was wondering, is in freebsd any protector against buffer overflow and performance against malware (exploits etc.) ? I was reading official user's lists about this thread. SSP has implemented since FreeBSD 8.0 but only for base system ! How problem looks with softwares ports/package ? Is there any implemented SSP or something like that ? I'm trying find some informations about PaX (equivalent stack protector in grsecurity). I can't find any informations about this problem, why is that such dead topic when is very important ? Yes i know about MAC, TrusteBSD etc. but it's not solutions on my problem.

[bryn1u]

I'm going to answer myself !

$ sysctl -da | fgrep stack
kern.elf64.nxstack: ELF64: enable non-executable stack
kern.elf32.nxstack: ELF32: enable non-executable stack
security.bsd.stack_guard_page: Insert stack guard page ahead of the growable segments.