On Sun, 18 Feb 2007 10:03:37 -0700

Theo de Raadt  wrote:
> Oh really, "it has been stated".  By who?  Overall, I doubt that all

quoted text
> of our security technologies add more than about 2% of a performance

> hit.  Even a 'make build' on most architectures did not add that.  I

> think you need to go back and read my slides again.  Spreading lies

> about 5-10% performance hits is just not kind to our efforts.

I've reread the slides again. I stand corrected when it comes to w^x &

propolice, but I'm still not in the clear when it comes to randomized

malloc & mmap. The slides from bsdcan 2004 state: "still failry

expensive", the slides from opencon 2005 no longer mention anything

about performance.
// nick