Thanks for catching that typo. I just pushed a fix for that, as well as
the edited OVAL (and the related .csv file).
On 01/18/2013 08:47 AM, Shawn Wells wrote:
On Jan 18, 2013, at 8:16 AM, David Smith<dsmith(a)eclipse.ncsc.mil> wrote:
> Signed-off-by: David Smith<dsmith(a)eclipse.ncsc.mil>
> ---
> RHEL6/input/system/permissions/execution.xml | 4 ++--
> 1 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/RHEL6/input/system/permissions/execution.xml
b/RHEL6/input/system/permissions/execution.xml
> index 59b103c..2e85c05 100644
> --- a/RHEL6/input/system/permissions/execution.xml
> +++ b/RHEL6/input/system/permissions/execution.xml
> @@ -136,8 +136,8 @@ address range.</rationale>
>
> <Rule id="enable_randomize_va_space" severity="medium">
> <title>Enable Randomized Layout of Virtual Address Space</title>
> -<description><sysctl-desc-macro
sysctl="kernel.randomize_va_space" value="1"
/></description>
> -<ocil><sysctl-check-macro sysctl="kernel.randomize_va_space"
value="1" /></ocil>
> +<description><sysctl-desc-macro
sysctl="kernel.randomize_va_space" value="2"
/></description>
> +<ocil><sysctl-check-macro sysctl="kernel.randomize_va_space"
value="2" /></ocil>
> <rationale> Address space layout randomization (ASLR) makes it more difficult
> for an attacker to predict the location of attack code he or she has introduced
> into a process's address space during an attempt at exploitation. Additionally,
ASLR also
> --
> 1.7.1
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
Any chance you could update the OVAL too? The operand should be changed to
"equals" with the new value of 2. I won't be on laptop until later this
afternoon to make the change myself.
Ack to this piece though.
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide