HardenedBSD 12 released

HardenedBSD has released
version 12 of its security-enhanced fork of FreeBSD. Improvements in
this release include Non-Cross-DSO Control-Flow Integrity (CFI) for
applications on amd64 and arm64; jailed bhyve; per-jail toggles for
unprivileged process debugging; Spectre v2 mitigation with retpoline
applied to the entirety of base and ports; Symmetric Multi-Threading (SMT)
disabled by default; and more.