Editing Comparison of operating systems (section)

== Security ==

{| class="wikitable" style="font-size: smaller; text-align: center; width: auto"
|-
! scope="col" rowspan="3" | Name
! scope="col" rowspan="3" | Resource<br>access<br>control
! scope="col" rowspan="3" | Subsystem<br>isolation<br>mechanisms
! scope="col" rowspan="3" | Integrated<br>[[firewall (computing)|firewall]]
! scope="col" rowspan="3" | Encrypted<br>file<br>systems
! scope="col" colspan="2" rowspan="2" | [[NX bit|No execute (NX)<br>page flag]]
! scope="col" colspan="6" | Manufacturer acknowledged unpatched vulnerabilities (by severity)<ref name="unpatched" group="s"/>
|-
! scope="col" colspan="5" | Secunia
! scope="col" | Security-<br>Focus
|-
! scope="col" {{verth|va=middle|Hardware}}
! scope="col" {{verth|va=middle|Emulation}}
! scope="col" style="width:12em" | Extremely critical<br>(number / oldest)
! scope="col" style="width:12em" | Highly<br> critical<br>(number / oldest)
! scope="col" style="width:12em" | Moderately critical<br>(number / oldest)
! scope="col" style="width:12em" | Less<br>critical <br>(number / oldest)
! scope="col" style="width:12em" | Not<br>critical<br>(number / oldest)
! scope="col" style="width:12em" | Total<br>(number / oldest)
|-
! scope="row" | [[AIX operating system|AIX 7.1]]
| [[filesystem permissions|POSIX]], [[access control list|ACLs]], [[mandatory access control|MAC]], [[Trusted AIX - MLS]], [[role-based access control|RBAC]]
| [[chroot]]
| [[IPFilter]], [[IPsec]] VPNs, basic IDS
| {{yes}}
| {{yes}}<ref name="AIXHardwareNX" group="s"/> || {{n/a}}
| colspan="5" {{unk}}<!-- Latest version: unlisted as of 2010-11-14 01:30-->
| {{Good|}}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=IBM&title=AIX&version=%207.1 0]<!-- 0 as at 2010-11-14 01:30-->
|-
! scope="row" | [[FreeBSD]] 10.1
| [[filesystem permissions|POSIX]], [[access control list|ACLs]], [[mandatory access control|MAC]]
| [[chroot]], [[FreeBSD jail|Jails]], MAC partitions, [[multilevel security]], [[Biba Model]], BSD file flags set using [[chflags]], Capsicum [[Capability-based security]]
| [[IPFW2]], [[IPFilter]], [[PF (firewall)|PF]], [[IPsec]]
| {{yes}}
| {{yes}} || {{yes}}<ref name="FreeBSDstackProtection" group="s"/>
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=FreeBSD&title=FreeBSD&version=%20-current >0]<!-- 13 as at 2010-11-14 00:48-->
|-
! scope="row" | [[GhostBSD]] 3.1
| POSIX, ACLs, MAC
| chroot, [[operating system-level virtualization|jail]], MAC partitions, BSD file flags set using [[chflags]]
| [[IPFW2]], IPFilter, [[PF (firewall)|PF]]
| {{yes}}
| {{yes}} || {{yes}}
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=FreeBSD&title=FreeBSD&version=%20-current >0]<!-- 13 as at 2010-11-14 00:48-->
|-
! scope="row" | [[Genode]]
| Hierarchal,<ref>{{cite web|url=https://genode.org/documentation/general-overview/index#Organizational_structure|title=Genode organizational structure}}</ref> [[least privilege]]
| [[capability-based security]]
| Virtual switch and [[Network address translation|NAPT]] controls in user-space
| {{no}}
| {{yes|kernel dependent}}
| {{no}}
| colspan="6" {{Unk}}
|-
! scope="row" | [[HP-UX]] 11.31
| POSIX, ACLs
| chroot
| IPFilter
| {{yes}}
| {{dunno}}
| {{dunno}}
| {{Good|}}[https://secunia.com/product/138/ 0]
| {{Good|}}[https://secunia.com/product/138/ 0]
| {{Bad| }}[https://secunia.com/product/138/ 3]<br>[https://secunia.com/advisories/11969/ {{start date and age|2004|6|30|br=yes}}]
| {{Bad| }}[https://secunia.com/product/138/ 2]<br>[https://secunia.com/advisories/7702/ {{start date and age|2002|12|12|br=yes}}]
| {{Good|}}[https://secunia.com/product/138/ 0]
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=HP&title=HP-UX&version=%2011.31 >0]<!-- 16 as at 2010-11-14 00:55-->
|-
! scope="row" | [[Inferno (operating system)|Inferno]]
| POSIX
| [[Namespace]]s,<ref name="namespace">{{cite web|url=https://9p.io/sys/doc/names.html|title=The Use of Name Spaces in Plan 9|author1=Rob Pike|author2=Dave Presotto|author3=Ken Thompson|author4=Howard Trickey|author5=Phil Winterbottom}}</ref> [[capability-based security]], no [[superuser]] or [[setuid]] bit
| {{dunno}}
| {{dunno}}
| {{no}} || {{no}}
| colspan="5" {{unk}}<!-- ANY version: unlisted as of 2010-11-14 01:30-->
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=Bell%20Labs&title=Plan%209 >0]<!-- 1 as at 2010-11-14 00:51-->
|-
! scope="row" | [[Linux|Linux-based]] 2.6.39
| POSIX, ACLs,<ref name="LinuxACL" group="s"/> MAC
| chroot,<ref name="LinuxJail" group="s"/> [[seccomp]], [[Linux namespaces|Namespace]]s, [[Security-Enhanced Linux|SELinux]], [[AppArmor]]
| [[Netfilter]], varied by distribution
| {{yes}}
| {{yes}} || {{yes}}
| {{Good|}}[https://secunia.com/product/2719/ 0]
| {{Good|}}[https://secunia.com/product/2719/ 0]
| {{Good|}}[https://secunia.com/product/2719/ 0]
| {{Bad| }}[https://secunia.com/product/2719/ 6]<br>[https://secunia.com/advisories/11931/ {{start date and age|2004|6|24|br=yes}}]
| {{Bad| }}[https://secunia.com/product/2719/ 11]<br>[https://secunia.com/advisories/14718/ {{start date and age|2005|4|04|br=yes}}]
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=Linux&title=kernel&version=2.6.36 >0]<!-- 14 as at 2010-11-14 00:50-->
|-
! scope="row" | [[Classic Mac OS|Mac OS]] 9.2.2
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}} || {{no}}
| {{Good|}}[https://secunia.com/product/832/ 0]
| {{Good|}}[https://secunia.com/product/832/ 0]
| {{Good|}}[https://secunia.com/product/832/ 0]
| {{Good|}}[https://secunia.com/product/832/ 0]
| {{Good|}}[https://secunia.com/product/832/ 0]
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=Apple&title=Mac%20OS%209&version=9.2.2 >0]<!-- 2 as at 2010-11-14 00:45-->
|-
! scope="row" | [[OS X]] 10.10.5
| POSIX, ACLs<ref name="MacACL" group="s"/>
| chroot, BSD file flags set using chflags
| [[ipfirewall|ipfw]]
| {{yes}}
| {{Yes}} (as of 10.5, X64 only) || {{Yes}} (Intel only)
| {{Good|}}[https://secunia.com/product/96/ 0]
| {{Good|}}[https://secunia.com/product/96/ 0]
| {{Bad| }}[https://secunia.com/product/96/ 1]<br>[https://secunia.com/advisories/34424/ {{start date and age|2009|04|14|br=yes}}]
| {{Bad| }}[https://secunia.com/product/96/ 2]<br>[https://secunia.com/advisories/23653/ {{start date and age|2007|01|08|br=yes}}]
| {{Bad| }}[https://secunia.com/product/96/ 5]<br>[https://secunia.com/advisories/23062/ {{start date and age|2006|11|22|br=yes}}]
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=Apple&title=Mac%20OS%20X&version=10.6.4 >0]<!-- 132 as at 2010-11-14 00:54-->
|-
! scope="row" | [[NetBSD]] 6.1.2
| POSIX, [[Veriexec]], PaX, kauth
| chroot, kauth, BSD file flags set using chflags
| IPFilter, [[NPF (firewall)|NPF]], PF
| {{yes}}
| {{yes}} || {{no}}
| colspan="5" {{unk}}<!-- Latest version: unlisted as of 2010-11-14 01:30-->
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=NetBSD&title=NetBSD&version=5.0.2 >0]<!-- 4 as at 2010-11-14 01:00-->
|-
! scope="row" | [[Novell NetWare|NetWare 6.5 SP8]]
| Directory-enabled ACLs
| Protected address spaces
| IPFLT.NLM
| {{yes}}
| {{yes}} || {{no}}
| {{Good|}}[https://secunia.com/product/78/ 0]
| {{Good|}}[https://secunia.com/product/78/ 0]
| {{Bad| }}[https://secunia.com/product/78/ 1]<br>[https://secunia.com/advisories/41180/ {{start date and age|2010|08|31|br=yes}}]
| {{Bad| }}[https://secunia.com/product/78/ 2]<br>[https://secunia.com/advisories/10100/ {{start date and age|2003|10|30|br=yes}}]
| {{Good|}}[https://secunia.com/product/78/ 0]
| {{Good|}}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=Novell&title=Netware&version=%206.5.0%20SP8 0]<!-- 0 as at 2010-11-14 01:00-->
|-
! scope="row" | [[Novell Open Enterprise Server|OES-Linux]]
| Directory-enabled ACLs
| chroot
| IPFilter
| {{yes}}
| {{yes}} || {{no}}
| colspan="5" {{unk}}<!-- ANY version: unlisted as of 2010-11-14 01:45-->
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=Novell&title=Open%20Enterprise%20Server&version=%202%20Linux%20Support%20Pack >0]<!-- 7 as at 2010-11-14 02:02-->
|-
! scope="row" | [[OpenBSD]] 4.8
| POSIX
| chroot, systrace, BSD file flags set using chflags
| PF
| {{yes}}
| {{yes}} || {{yes}}
| colspan="5" {{unk}}<!-- Latest version: unlisted as of 2010-11-14 01:30-->
| {{Bad|}}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=OpenBSD&title=OpenBSD&version=%20-current >0]<!-- 23 as at 2010-11-14 01:02-->
|-
! scope="row" | [[OpenVMS]] 9.2
| ACLs, [[privilege (computing)|privileges]]
| [https://web.archive.org/web/20051130185759/http://h71000.www7.hp.com/DOC/731final/6489/6489pro_027.html#usingdifflogtables logical name tables]
| {{dunno}}
| {{dunno}}
| {{yes}} || {{dunno}}
| {{Good|}}[https://secunia.com/product/6052/ 0]
| {{Good|}}[https://secunia.com/product/6052/ 0]
| {{Good|}}[https://secunia.com/product/6052/ 0]
| {{Good|}}[https://secunia.com/product/6052/ 0]
| {{Good|}}[https://secunia.com/product/6052/ 0]
| {{Unk| }}[http://www.securityfocus.com/cgi-bin/index.cgi?o=0&l=100&c=12&op=display_list&vendor=HP&title=OpenVMS&version=%208.4%20Integrity Unknown]<!-- Latest version: unlisted as of 2010-11-14 01:00-->
|-
! scope="row" | [[OS/2]], [[eComStation]], [[ArcaOS]]
| ACLs<ref name="OS2ACL" group="s"/>
| {{no}}
| IPFilter
| {{no}}
| {{dunno}}
| {{dunno}}
| {{Good|}}[https://secunia.com/product/1188/ 0]
| {{Good|}}[https://secunia.com/product/1188/ 0]
| {{Good|}}[https://secunia.com/product/1188/ 0]
| {{Good|}}[https://secunia.com/product/1188/ 0]
| {{Good|}}[https://secunia.com/product/1188/ 0]
| {{Good|}}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=IBM&title=OS/2&version=4.5%20Warp 0]<!-- 0 as at 2010-11-14 01:00-->
|-
! scope="row" | [[TrueOS]] 8.1
| POSIX, ACLs, MAC
| chroot, jail, MAC partitions
| IPFW2, IPFilter, PF
| {{yes}}<ref name="PCBSDencrypted" group="s"/>
| {{dunno}}
| {{dunno}}
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Good|}}[https://secunia.com/product/32931/ 0]
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=FreeBSD&title=FreeBSD&version=%20-current >0]<!-- 13 as at 2010-11-14 00:48-->
|-
! scope="row" | [[Plan 9 from Bell Labs|Plan 9]]
| POSIX ?
| Namespaces,<ref name="namespace" /> capability-based security, no superuser or setuid bit
| ipmux
| {{yes}}
| {{no}} || {{no}}
| colspan="5" {{unk}}<!-- ANY version: unlisted as of 2010-11-14 01:30-->
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=Bell%20Labs&title=Plan%209 >0]<!-- 1 as at 2010-11-14 00:51-->
|-
! scope="row" | [[QNX]] 6.5.0
| POSIX
| {{dunno}}
| PF, from NetBSD
| {{dunno}}
| {{dunno}}
| {{dunno}}
| {{Good|}}[https://secunia.com/product/708/ 0]
| {{Good|}}[https://secunia.com/product/708/ 0]
| {{Good|}}[https://secunia.com/product/708/ 0]
| {{Bad| }}[https://secunia.com/product/708/ 5]<br>[https://secunia.com/advisories/7562/ {{start date and age|2002|11|20|br=yes}}]
| {{Bad| }}[https://secunia.com/product/708/ 1]<br>[https://secunia.com/advisories/7463/ {{start date and age|2002|11|07|br=yes}}]
| {{Unk| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=QNX&title=RTOS&version=6.5.0 Unknown]<!-- Latest version: unlisted as of 2010-11-14 01:00-->
|-
! scope="row" | [[RISC OS]]
| {{no}}
| {{no}}
| IPFilter
| {{no}}
| {{no}} || {{no}}
| colspan="6" {{unk}}<!-- ANY version: unlisted as of 2011-07-08 17:00-->
|-
! scope="row" | [[Solaris (operating system)|Solaris 10]]
| POSIX, RBAC, ACLs, [[least privilege]], [[Solaris Trusted Extensions|Trusted Extensions]]
| chroot, [[Solaris Containers|Containers]],<ref name="SolarisJail" group="s"/> [[Logical Domains]]
| IPFilter
| {{Yes}}<ref name="SolarisEncrypted" group="s"/>
| {{Yes}}
| {{No}}
| {{Good|}}[https://secunia.com/product/4813/ 0]
| {{Bad| }}[https://secunia.com/product/4813/ 2]<br>[https://secunia.com/advisories/27423/ {{start date and age|2007|10|31|br=yes}}]
| {{Bad| }}[https://secunia.com/product/4813/ 5]<br>[https://secunia.com/advisories/27328/ {{start date and age|2007|10|23|br=yes}}]
| {{Bad| }}[https://secunia.com/product/4813/ 3]<br>[https://secunia.com/advisories/36668/ {{start date and age|2009|09|10|br=yes}}]
| {{Bad| }}[https://secunia.com/product/4813/ 2]<br>[https://secunia.com/advisories/22714/ {{start date and age|2006|11|06|br=yes}}]
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=Sun&title=Solaris&version=%2010 >0]<!-- 312 as at 2010-11-14 01:00-->
|-
! scope="row" | [[OpenSolaris]] 2009.06
| POSIX, RBAC, ACLs, least privilege, Trusted Extensions
| chroot, Containers,<ref name="SolarisJail" group="s"/> Logical Domains
| IPFilter
| {{Yes}}<ref name="SolarisEncrypted" group="s"/>
| {{Yes}}
| {{No}}
| {{Good|}}[https://secunia.com/product/32733/ 0]
| {{Good|}}[https://secunia.com/product/32733/ 0]
| {{Good|}}[https://secunia.com/product/32733/ 0]
| {{Good|}}[https://secunia.com/product/32733/ 0]
| {{Good|}}[https://secunia.com/product/32733/ 0]
| {{Bad| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=Sun&title=OpenSolaris&version=%202009.06 >0]<!-- 13 as at 2010-11-14 01:00-->
|-
! scope="row" | [[Windows Server 2012]]
| ACLs, privileges, RBAC
| Win32 WindowStation, desktop, job objects
| [[Windows Firewall]]
| {{yes}}
| {{yes}} || {{yes}}
| {{Good|}}[https://secunia.com/product/42761/ 0]
| {{Good|}}[https://secunia.com/product/42761/ 0]
| {{Good|}}[https://secunia.com/product/42761/ 0]
| {{Good|}}[https://secunia.com/product/42761/ 0]
| {{Good|}}[https://secunia.com/product/42761/ 0]
| {{Unk|}}[Unknown]
|-
! scope="row" | [[Windows 8.1]]
| ACLs, privileges, RBAC
| Win32 WindowStation, desktop, job objects
| [[Windows Firewall]]
| {{yes}}
| {{yes}} || {{yes}}
| {{Good|}}[https://secunia.com/product/48611/ 0]
| {{Good|}}[https://secunia.com/product/48611/ 0]
| {{Good|}}[https://secunia.com/product/48611/ 0]
| {{Good|}}[https://secunia.com/product/48611/ 0]
| {{Bad|}}[https://secunia.com/product/48611/ 1]<br>[https://secunia.com/advisories/58891/ {{start date and age|2014|05|30|br=yes}}]
| {{Unk|}}[Unknown]
|-
! scope="row" | [[Magnussoft ZETA|ZETA]]
| POSIX<ref name="ZetaSuperuser" group="s"/>
| {{no}}
| {{no}}
| {{no}}
| {{no}} || {{no}}
| colspan="6" {{unk}}<!-- ANY version: unlisted as of 2010-11-14 01:30-->
|-
! scope="row" | [[XTS-400|STOP 6, XTS-400]]<ref name="STOP6Certified" group="s"/>
| POSIX, [[multilevel security]], [[Biba Model]] mandatory integrity, ACLs, privileges, subtype mechanism
| Multilevel security, Biba Model, subtype mechanism
| {{no}}
| {{no}}
| {{No}}
| {{No}}
| colspan="6" {{unk}}<!-- ANY version: unlisted as of 2010-11-14 01:30-->
|-
! scope="row" | [[z/OS]] 1.11
| [[RACF]]
| RACF, low storage protection, page protection, storage protect key, execution key, subspace group facility, APF, ACR (alternate CPU recovery), more
| z/OS IPSecurity
| {{Optional}}
| {{Yes}} (storage protect key, execution key, APF, more)
| {{Yes}}
| {{Good|}}[https://secunia.com/product/210/ 0]
| {{Good|}}[https://secunia.com/product/210/ 0]
| {{Good|}}[https://secunia.com/product/210/ 0]
| {{Good|}}[https://secunia.com/product/210/ 0]
| {{Good|}}[https://secunia.com/product/210/ 0]
| {{Unk| }}[http://www.securityfocus.com/cgi-bin/index.cgi?c=12&op=display_list&vendor=IBM&title=z/OS&version=%201.11 Unknown]<!-- Latest version: unlisted as of 2010-11-14 01:00-->
|-
! scope="col" rowspan="3" | Name
! scope="col" rowspan="3" | Resource<br>access<br>control
! scope="col" rowspan="3" | Subsystem<br>isolation<br>mechanisms
! scope="col" rowspan="3" | Integrated<br>[[firewall (computing)|firewall]]
! scope="col" rowspan="3" | Encrypted<br>file<br>systems
! scope="col" {{verth|va=middle|Hardware}}
! scope="col" {{verth|va=middle|Emulation}}
! scope="col" style="width:12em" | Extremely critical<br>(number / oldest)
! scope="col" style="width:12em" | Highly <br> critical<br>(number / oldest)
! scope="col" style="width:12em" | Moderately critical<br>(number / oldest)
! scope="col" style="width:12em" | Less<br> critical<br>(number / oldest)
! scope="col" style="width:12em" | Not <br> critical<br>(number / oldest)
! scope="col" style="width:12em" | Total<br>(number / oldest)
|-
! scope="col" colspan="2" rowspan="2" | [[NX bit|No execute (NX)<br>page flag]]
! scope="col" colspan="5" | Secunia
! scope="col" | Security-<br> Focus
|-
! scope="col" colspan="6" | Known unpatched vulnerabilities (severity is accounted for)<ref name="unpatched" group="s"/>
|}

{{Reflist|group="s"|refs=
<ref name="unpatched">Comparison of known unpatched vulnerabilities based on [[Secunia]] & [[SecurityFocus]] reports with severity of ''Not critical'' & above. Update lists manually with oldest published date(s).</ref>
<ref name="LinuxACL">Support for the 1997 withdrawn POSIX [[access control list|ACL]] draft is included in Linux 2.6, but requires a file system able to store them (such as [[ext3]], [[XFS]] or [[ReiserFS]]).</ref>
<ref name="LinuxJail">A [[operating system-level virtualization|jail]] mechanism is available separately in the [[Linux-VServer]] project, but is not integrated into any mainline [[Linux kernel]].</ref>
<ref name="OS2ACL">ACLs are available only in [[OS/2]] Server versions with [[High Performance File System|HPFS386]] filesystem.</ref>
<ref name="SolarisJail">"[[Solaris Containers]]" (including "Zones") are a jail-type mechanism introduced with [[Solaris (operating system)|Solaris]] 10.</ref>
<ref name="ZetaSuperuser">Zeta has full Unix file permissions, but the OS is single user, and users always run as superuser.</ref>
<ref name="STOP6Certified">STOP 6 is certified under [[Common Criteria]] at [[Evaluation Assurance Level|EAL5+]].</ref>
<ref name="PCBSDencrypted">Additionally swap space may be encrypted during installation, uses memory based tmp file storage by default.</ref>
<ref name="SolarisEncrypted">Through [[ZFS]]</ref>
<ref name="AIXHardwareNX">AIX use the [[PowerPC]] architecture which offer page-level protection mechanism. Since AIX version 5300-03 (5.3), this feature can be activated using the [http://publib.boulder.ibm.com/infocenter/systems/index.jsp?topic=/com.ibm.aix.security/doc/security/stack_exec_disable_modes_monitor.htm&tocNode=int_39558 sedmgr command].</ref>
<ref name="FreeBSDstackProtection">The GCC stack protection (a.k.a. ProPolice stack-smashing protector) has been enabled in base system since FreeBSD 8.0-release.</ref>
<ref name="MacACL">ACLs were added to [[Mac OS X]] starting with version 10.4.</ref>
}}