Skip to content

Instantly share code, notes, and snippets.

@lattera
Created September 7, 2015 18:29
Show Gist options
  • Save lattera/f867f89178d008645b16 to your computer and use it in GitHub Desktop.
Save lattera/f867f89178d008645b16 to your computer and use it in GitHub Desktop.
root@:~ # ps wwaux | grep sshd
root 55516 0.0 0.0 12664 1804 - Is 17:27 0:00.07 /usr/sbin/sshd
root 90018 0.0 0.1 6488 2284 0 S+ 17:28 0:00.15 grep sshd
root@:~ # procstat -v 55516
PID START END PRT RES PRES REF SHD FLAG TP PATH
55516 0x15d820000 0x15d867000 r-x 71 78 2 1 CN-- vn /usr/sbin/sshd
55516 0x15d877000 0x15d879000 rw- 2 0 1 0 C--- vn /usr/sbin/sshd
55516 0x15d879000 0x15d881000 rw- 8 8 1 0 C--- df
55516 0x1f0a0c000 0x1f0a24000 r-x 24 27 12 0 CN-- vn /libexec/ld-elf.so.1
55516 0x1f0a24000 0x1f0a2c000 rw- 8 8 1 0 C--- df
55516 0x1f0a34000 0x1f0a36000 rw- 2 2 1 0 CN-- df
55516 0x1f0a36000 0x1f0a3e000 r-x 8 9 6 3 CN-- vn /usr/lib/libwrap.so.6
55516 0x1f0a3e000 0x1f0a4e000 --- 0 0 1 0 CN-- df
55516 0x1f0a4e000 0x1f0a4f000 rw- 1 0 1 0 CN-- vn /usr/lib/libwrap.so.6
55516 0x1f0a4f000 0x1f0bd0000 r-x 369 410 6 3 CN-- vn /lib/libcrypto.so.7
55516 0x1f0bd0000 0x1f0be0000 --- 0 0 1 0 CN-- df
55516 0x1f0be0000 0x1f0c07000 rw- 39 0 1 0 CN-- vn /lib/libcrypto.so.7
55516 0x1f0c07000 0x1f0c09000 rw- 1 1 1 0 CN-- df
55516 0x1f0c09000 0x1f0c24000 r-x 19 22 2 1 CN-- vn /usr/lib/libgssapi_krb5.so.10
55516 0x1f0c24000 0x1f0c33000 --- 0 0 1 0 CN-- df
55516 0x1f0c33000 0x1f0c35000 rw- 2 0 1 0 CN-- vn /usr/lib/libgssapi_krb5.so.10
55516 0x1f0c35000 0x1f0c40000 r-x 11 12 6 3 CN-- vn /usr/lib/libpam.so.5
55516 0x1f0c40000 0x1f0c50000 --- 0 0 1 0 CN-- df
55516 0x1f0c50000 0x1f0c51000 rw- 1 0 1 0 CN-- vn /usr/lib/libpam.so.5
55516 0x1f0c51000 0x1f0c6a000 r-x 24 27 2 1 CN-- vn /lib/libthr.so.3
55516 0x1f0c6a000 0x1f0c7a000 --- 0 0 1 0 CN-- df
55516 0x1f0c7a000 0x1f0c7b000 rw- 1 0 1 0 C--- vn /lib/libthr.so.3
55516 0x1f0c7b000 0x1f0c86000 rw- 11 11 1 0 C--- df
55516 0x1f0c86000 0x1f0cec000 r-x 56 63 2 1 CN-- vn /usr/lib/libkrb5.so.11
55516 0x1f0cec000 0x1f0cfc000 --- 0 0 1 0 CN-- df
55516 0x1f0cfc000 0x1f0d01000 rw- 5 0 1 0 CN-- vn /usr/lib/libkrb5.so.11
55516 0x1f0d01000 0x1f0d10000 r-x 15 16 20 10 CN-- vn /lib/libutil.so.9
55516 0x1f0d10000 0x1f0d20000 --- 0 0 1 0 CN-- df
55516 0x1f0d20000 0x1f0d21000 rw- 1 0 1 0 CN-- vn /lib/libutil.so.9
55516 0x1f0d21000 0x1f0d23000 rw- 0 0 0 0 ---- --
55516 0x1f0d23000 0x1f0da3000 r-x 128 133 2 1 CN-- vn /usr/lib/libprivatessh.so.5
55516 0x1f0da3000 0x1f0db2000 --- 0 0 1 0 CN-- df
55516 0x1f0db2000 0x1f0db6000 rw- 4 0 1 0 C--- vn /usr/lib/libprivatessh.so.5
55516 0x1f0db6000 0x1f0db7000 rw- 0 0 0 0 ---- --
55516 0x1f0db7000 0x1f0dce000 r-x 23 24 4 2 CN-- vn /usr/lib/libbsm.so.3
55516 0x1f0dce000 0x1f0ddd000 --- 0 0 1 0 CN-- df
55516 0x1f0ddd000 0x1f0ddf000 rw- 2 0 1 0 CN-- vn /usr/lib/libbsm.so.3
55516 0x1f0ddf000 0x1f0f26000 r-x 327 341 23 11 CN-- vn /lib/libc.so.7
55516 0x1f0f26000 0x1f0f36000 --- 0 0 1 0 CN-- df
55516 0x1f0f36000 0x1f0f42000 rw- 12 0 1 0 C--- vn /lib/libc.so.7
55516 0x1f0f42000 0x1f0f5c000 rw- 12 12 1 0 C--- df
55516 0x1f0f5c000 0x1f0f64000 r-x 8 8 2 1 CN-- vn /usr/lib/libgssapi.so.10
55516 0x1f0f64000 0x1f0f73000 --- 0 0 1 0 CN-- df
55516 0x1f0f73000 0x1f0f74000 rw- 1 0 1 0 CN-- vn /usr/lib/libgssapi.so.10
55516 0x1f0f74000 0x1f0f83000 r-x 15 16 2 1 CN-- vn /usr/lib/libroken.so.11
55516 0x1f0f83000 0x1f0f93000 --- 0 0 1 0 CN-- df
55516 0x1f0f93000 0x1f0f94000 rw- 1 0 1 0 CN-- vn /usr/lib/libroken.so.11
55516 0x1f0f94000 0x1f0f9d000 rw- 9 9 1 0 C--- df
55516 0x1f0f9d000 0x1f0f9e000 r-x 1 2 2 1 CN-- vn /usr/lib/libcom_err.so.5
55516 0x1f0f9e000 0x1f0fae000 --- 0 0 1 0 CN-- df
55516 0x1f0fae000 0x1f0faf000 rw- 1 0 1 0 CN-- vn /usr/lib/libcom_err.so.5
55516 0x1f0faf000 0x1f1031000 r-x 34 39 2 1 CN-- vn /usr/lib/libasn1.so.11
55516 0x1f1031000 0x1f1041000 --- 0 0 1 0 CN-- df
55516 0x1f1041000 0x1f1044000 rw- 3 0 1 0 CN-- vn /usr/lib/libasn1.so.11
55516 0x1f1044000 0x1f1047000 r-x 3 3 2 1 CN-- vn /usr/lib/libheimbase.so.11
55516 0x1f1047000 0x1f1056000 --- 0 0 1 0 CN-- df
55516 0x1f1056000 0x1f1057000 rw- 1 0 1 0 CN-- vn /usr/lib/libheimbase.so.11
55516 0x1f1057000 0x1f1064000 r-x 13 14 8 4 CN-- vn /lib/libcrypt.so.5
55516 0x1f1064000 0x1f1074000 --- 0 0 1 0 CN-- df
55516 0x1f1074000 0x1f1075000 rw- 1 0 1 0 CN-- vn /lib/libcrypt.so.5
55516 0x1f1075000 0x1f1086000 rw- 0 0 0 0 ---- --
55516 0x1f1086000 0x1f1088000 r-x 2 2 2 1 CN-- vn /usr/lib/libprivateheimipcc.so.11
55516 0x1f1088000 0x1f1097000 --- 0 0 1 0 CN-- df
55516 0x1f1097000 0x1f1098000 rw- 1 0 1 0 CN-- vn /usr/lib/libprivateheimipcc.so.11
55516 0x1f1098000 0x1f10bf000 r-x 17 19 2 1 CN-- vn /usr/lib/libwind.so.11
55516 0x1f10bf000 0x1f10ce000 --- 0 0 1 0 CN-- df
55516 0x1f10ce000 0x1f10cf000 rw- 1 0 1 0 CN-- vn /usr/lib/libwind.so.11
55516 0x1f10cf000 0x1f110f000 r-x 40 45 2 1 CN-- vn /usr/lib/libhx509.so.11
55516 0x1f110f000 0x1f111e000 --- 0 0 1 0 CN-- df
55516 0x1f111e000 0x1f1122000 rw- 4 0 1 0 CN-- vn /usr/lib/libhx509.so.11
55516 0x1f1122000 0x1f116c000 r-x 34 41 2 1 CN-- vn /usr/lib/libprivateldns.so.5
55516 0x1f116c000 0x1f117b000 --- 0 0 1 0 CN-- df
55516 0x1f117b000 0x1f1181000 rw- 6 0 1 0 CN-- vn /usr/lib/libprivateldns.so.5
55516 0x1f1181000 0x1f1194000 r-x 16 17 2 1 CN-- vn /lib/libz.so.6
55516 0x1f1194000 0x1f11a4000 --- 0 0 1 0 CN-- df
55516 0x1f11a4000 0x1f11a5000 rw- 1 0 1 0 CN-- vn /lib/libz.so.6
55516 0x1f11a5000 0x1f1600000 rw- 275 275 1 0 C--- df
55516 0x7f103ee000 0x7f103ef000 --- 0 0 0 0 ---- --
55516 0x7f503cf000 0x7f503ef000 rw- 4 4 1 0 C--D df
root@:~ # service sshd onerestart
Performing sanity check on sshd configuration.
Stopping sshd.
Performing sanity check on sshd configuration.
Starting sshd.
root@:~ # ps wwaux | grep sshd
root 61015 5.9 0.0 12660 1812 - Ss 17:29 0:00.06 /usr/sbin/sshd
root 63974 0.0 0.0 6488 1980 0 R+ 17:29 0:00.12 grep sshd
root@:~ # procstat -v 61015
PID START END PRT RES PRES REF SHD FLAG TP PATH
61015 0x1ce7ab000 0x1ce7f2000 r-x 71 78 2 1 CN-- vn /usr/sbin/sshd
61015 0x1ce802000 0x1ce804000 rw- 2 0 1 0 C--- vn /usr/sbin/sshd
61015 0x1ce804000 0x1ce80c000 rw- 8 8 1 0 C--- df
61015 0x3d7423000 0x3d743b000 r-x 24 27 12 0 CN-- vn /libexec/ld-elf.so.1
61015 0x3d743b000 0x3d7443000 rw- 8 8 1 0 C--- df
61015 0x3d744b000 0x3d744d000 rw- 2 2 1 0 CN-- df
61015 0x3d744d000 0x3d7466000 r-x 24 27 2 1 CN-- vn /lib/libthr.so.3
61015 0x3d7466000 0x3d7476000 --- 0 0 1 0 CN-- df
61015 0x3d7476000 0x3d7477000 rw- 1 0 1 0 C--- vn /lib/libthr.so.3
61015 0x3d7477000 0x3d7482000 rw- 11 11 1 0 C--- df
61015 0x3d7482000 0x3d7499000 r-x 23 24 4 2 CN-- vn /usr/lib/libbsm.so.3
61015 0x3d7499000 0x3d74a8000 --- 0 0 1 0 CN-- df
61015 0x3d74a8000 0x3d74aa000 rw- 2 0 1 0 CN-- vn /usr/lib/libbsm.so.3
61015 0x3d74aa000 0x3d74b5000 r-x 11 12 6 3 CN-- vn /usr/lib/libpam.so.5
61015 0x3d74b5000 0x3d74c5000 --- 0 0 1 0 CN-- df
61015 0x3d74c5000 0x3d74c6000 rw- 1 0 1 0 CN-- vn /usr/lib/libpam.so.5
61015 0x3d74c6000 0x3d7647000 r-x 369 410 6 3 CN-- vn /lib/libcrypto.so.7
61015 0x3d7647000 0x3d7657000 --- 0 0 1 0 CN-- df
61015 0x3d7657000 0x3d767e000 rw- 39 0 1 0 CN-- vn /lib/libcrypto.so.7
61015 0x3d767e000 0x3d7680000 rw- 1 1 1 0 CN-- df
61015 0x3d7680000 0x3d769b000 r-x 19 22 2 1 CN-- vn /usr/lib/libgssapi_krb5.so.10
61015 0x3d769b000 0x3d76aa000 --- 0 0 1 0 CN-- df
61015 0x3d76aa000 0x3d76ac000 rw- 2 0 1 0 CN-- vn /usr/lib/libgssapi_krb5.so.10
61015 0x3d76ac000 0x3d77f3000 r-x 327 341 23 11 CN-- vn /lib/libc.so.7
61015 0x3d77f3000 0x3d7803000 --- 0 0 1 0 CN-- df
61015 0x3d7803000 0x3d780f000 rw- 12 0 1 0 C--- vn /lib/libc.so.7
61015 0x3d780f000 0x3d7829000 rw- 12 12 1 0 C--- df
61015 0x3d7829000 0x3d788f000 r-x 56 63 2 1 CN-- vn /usr/lib/libkrb5.so.11
61015 0x3d788f000 0x3d789f000 --- 0 0 1 0 CN-- df
61015 0x3d789f000 0x3d78a4000 rw- 5 0 1 0 CN-- vn /usr/lib/libkrb5.so.11
61015 0x3d78a4000 0x3d78b3000 r-x 15 16 20 10 CN-- vn /lib/libutil.so.9
61015 0x3d78b3000 0x3d78c3000 --- 0 0 1 0 CN-- df
61015 0x3d78c3000 0x3d78c4000 rw- 1 0 1 0 CN-- vn /lib/libutil.so.9
61015 0x3d78c4000 0x3d78c6000 rw- 0 0 0 0 ---- --
61015 0x3d78c6000 0x3d7946000 r-x 128 133 2 1 CN-- vn /usr/lib/libprivatessh.so.5
61015 0x3d7946000 0x3d7955000 --- 0 0 1 0 CN-- df
61015 0x3d7955000 0x3d7959000 rw- 4 0 1 0 C--- vn /usr/lib/libprivatessh.so.5
61015 0x3d7959000 0x3d795a000 rw- 0 0 0 0 ---- --
61015 0x3d795a000 0x3d7962000 r-x 8 8 2 1 CN-- vn /usr/lib/libgssapi.so.10
61015 0x3d7962000 0x3d7971000 --- 0 0 1 0 CN-- df
61015 0x3d7971000 0x3d7972000 rw- 1 0 1 0 CN-- vn /usr/lib/libgssapi.so.10
61015 0x3d7972000 0x3d797a000 r-x 8 9 6 3 CN-- vn /usr/lib/libwrap.so.6
61015 0x3d797a000 0x3d798a000 --- 0 0 1 0 CN-- df
61015 0x3d798a000 0x3d798b000 rw- 1 0 1 0 CN-- vn /usr/lib/libwrap.so.6
61015 0x3d798b000 0x3d799a000 r-x 15 16 2 1 CN-- vn /usr/lib/libroken.so.11
61015 0x3d799a000 0x3d79aa000 --- 0 0 1 0 CN-- df
61015 0x3d79aa000 0x3d79ab000 rw- 1 0 1 0 CN-- vn /usr/lib/libroken.so.11
61015 0x3d79ab000 0x3d79b4000 rw- 9 9 1 0 C--- df
61015 0x3d79b4000 0x3d7a36000 r-x 34 39 2 1 CN-- vn /usr/lib/libasn1.so.11
61015 0x3d7a36000 0x3d7a46000 --- 0 0 1 0 CN-- df
61015 0x3d7a46000 0x3d7a49000 rw- 3 0 1 0 CN-- vn /usr/lib/libasn1.so.11
61015 0x3d7a49000 0x3d7a4a000 r-x 1 2 2 1 CN-- vn /usr/lib/libcom_err.so.5
61015 0x3d7a4a000 0x3d7a5a000 --- 0 0 1 0 CN-- df
61015 0x3d7a5a000 0x3d7a5b000 rw- 1 0 1 0 CN-- vn /usr/lib/libcom_err.so.5
61015 0x3d7a5b000 0x3d7a9b000 r-x 40 45 2 1 CN-- vn /usr/lib/libhx509.so.11
61015 0x3d7a9b000 0x3d7aaa000 --- 0 0 1 0 CN-- df
61015 0x3d7aaa000 0x3d7aae000 rw- 4 0 1 0 CN-- vn /usr/lib/libhx509.so.11
61015 0x3d7aae000 0x3d7ab1000 r-x 3 3 2 1 CN-- vn /usr/lib/libheimbase.so.11
61015 0x3d7ab1000 0x3d7ac0000 --- 0 0 1 0 CN-- df
61015 0x3d7ac0000 0x3d7ac1000 rw- 1 0 1 0 CN-- vn /usr/lib/libheimbase.so.11
61015 0x3d7ac1000 0x3d7ace000 r-x 13 14 8 4 CN-- vn /lib/libcrypt.so.5
61015 0x3d7ace000 0x3d7ade000 --- 0 0 1 0 CN-- df
61015 0x3d7ade000 0x3d7adf000 rw- 1 0 1 0 CN-- vn /lib/libcrypt.so.5
61015 0x3d7adf000 0x3d7af0000 rw- 0 0 0 0 ---- --
61015 0x3d7af0000 0x3d7b17000 r-x 17 19 2 1 CN-- vn /usr/lib/libwind.so.11
61015 0x3d7b17000 0x3d7b26000 --- 0 0 1 0 CN-- df
61015 0x3d7b26000 0x3d7b27000 rw- 1 0 1 0 CN-- vn /usr/lib/libwind.so.11
61015 0x3d7b27000 0x3d7b29000 r-x 2 2 2 1 CN-- vn /usr/lib/libprivateheimipcc.so.11
61015 0x3d7b29000 0x3d7b38000 --- 0 0 1 0 CN-- df
61015 0x3d7b38000 0x3d7b39000 rw- 1 0 1 0 CN-- vn /usr/lib/libprivateheimipcc.so.11
61015 0x3d7b39000 0x3d7b4c000 r-x 16 17 2 1 CN-- vn /lib/libz.so.6
61015 0x3d7b4c000 0x3d7b5c000 --- 0 0 1 0 CN-- df
61015 0x3d7b5c000 0x3d7b5d000 rw- 1 0 1 0 CN-- vn /lib/libz.so.6
61015 0x3d7b5d000 0x3d7ba7000 r-x 34 41 2 1 CN-- vn /usr/lib/libprivateldns.so.5
61015 0x3d7ba7000 0x3d7bb6000 --- 0 0 1 0 CN-- df
61015 0x3d7bb6000 0x3d7bbc000 rw- 6 0 1 0 CN-- vn /usr/lib/libprivateldns.so.5
61015 0x3d7bbc000 0x3d7c16000 rw- 80 80 1 0 CN-- df
61015 0x3d7e00000 0x3d8200000 rw- 195 195 1 0 C--- df
61015 0x7dff8cc000 0x7dff8cd000 --- 0 0 0 0 ---- --
61015 0x7e3f8ad000 0x7e3f8cd000 rw- 4 4 1 0 C--D df
root@:~ # uname -a
FreeBSD 11.0-CURRENT-HBSD FreeBSD 11.0-CURRENT-HBSD #4 f1f994c(hardened/current/unstable)-dirty: Mon Sep 7 11:26:54 EDT 2015 shawn@hbsd-dev-laptop:/usr/obj/arm64-workspace/obj/arm64.aarch64/usr/src/sys/HARDENEDBSD arm64
root@:~ # sysctl hardening
hardening.procfs_harden: 1
hardening.log.ulog: 0
hardening.log.log: 1
hardening.version: 31
hardening.pax.disallow_map32bit.status: 2
hardening.pax.aslr.vdso_len: 21
hardening.pax.aslr.exec_len: 21
hardening.pax.aslr.stack_len: 21
hardening.pax.aslr.mmap_len: 21
hardening.pax.aslr.status: 2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment