HardenedBSD has been hard at work attempting to improve the performance and stability of our additions. Security flags are now per-thread instead of per-process, removing some locking overhead. ASLR for mmap(MAP_32BIT) requests has been refactored, but lib32 is now disabled by default.

We've developed a new binary update utility, hbsd-update akin to freebsd-update. In addition to normal OS installs, it can als update jails and ZFS Boot Environments (ZFS BEs). Updates are signed using X.509 certificates.

secadm 0.3-beta has landed. It has been rewritten from scratch in order to be more efficient. As part of the rewrite, the rule syntax has changed and users must update their rulesets as described in the README.

Thanks to generous donations of a server from G2, Inc and hosting from Automated Tendencies, we can now do full package builds in just 35 hours, down from 75 hours. This machine will also provide weekly binary updates for the kernel and base system.

Owing partly to the needs of the developers, we have an experimental branch that includes the work &a.dumbbell; has underway for Haswell graphics support, on top of &os; 11-current. Binary updates are also provided for this branch.

Unfortunately, in order to focus our efforts on improving HardenedBSD, we have had to pull back from submitting our ASLR patches to &os;. The past two years' efforts to address comments on the submission have taken their toll, and the effort is no longer sustainable. We are proud to be based on &os; and believe that the whole community could benefit from the security technologies we are developing, and we hope that someone else will be able to step forward and finish off the task of integrating ASLR into &os;.