libaslrmalloc and ld-so-daemon

[topimiettinen]

Perhaps users and developers of Firejail would be interested in my two new hardening projects:

• libaslrmalloc: library to randomize memory allocations (works but not optimized)
• ld-so-daemon: replace dynamic linker ld.so with client/server architecture for memory randomization, privilege separation, fine grained seccomp and other goodies (just a proof of concept, not usable yet)

libaslrmalloc can be used without modifying Firejail (though a recent Firejail with #4559 helps). The performance isn't great but that's not the point of the library.

ld-so-daemon isn't usable yet (a simple statically linked executable works) but I think the concept has lot of potential in the future to harden programs launched from Firejail.