On 1/15/13 7:25 PM, Kenneth Stailey wrote:
All,
Sorry I've been away for a while, things have been very busy here.
My system fails the ASLR sysctl test because is more secure than the test requires.
The test checks that the ASLR control is set to "1" while setting it to
"2"
randomizes more of the system's memory.
See Linux documentation file Documentation/sysctl/kernel.txt
http://lxr.linux.no/#linux+v3.7.2/Documentation/sysctl/kernel.txt#L482
I went ahead and patched this behavior as a bugfix [1] until a decision
can be made about permanently upping the ASLR value. The check now scans
for >= 1 which will eliminate the false positive if users have a higher
setting. Thank you for reporting this bug!
[1]
https://fedorahosted.org/scap-security-guide/changeset/e7973bb192b23d1185...