[scap-security-guide] #201: False positive: enable_randomize_va_space

scap-security-guide trac at fedorahosted.org
Sat Apr 20 06:08:22 UTC 2013


#201: False positive:  enable_randomize_va_space
------------------------------+-------------------------------------
  Reporter:  Logan.Rodrian@…  |      Owner:  mnewman23
      Type:  defect           |     Status:  closed
  Priority:  major            |  Milestone:  RHEL6 STIG OVAL Content
 Component:  OVAL content     |    Version:  0.5.0-InitialDraft
Resolution:  worksforme       |   Keywords:
Blocked By:                   |   Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):

 * cc: scap-security-guide@… (added)
 * resolution:   => worksforme
 * status:  new => closed


Comment:

 [root at rhel6 checks]# sysctl -w kernel.randomize_va_space=0
 kernel.randomize_va_space = 0

 [root at rhel6 checks]# ./testcheck.py sysctl_kernel_randomize_va_space.xml
 Evaluating with OVAL tempfile :
 /tmp/sysctl_kernel_randomize_va_spaceCCIFTH.xml
 Definition oval:scap-security-guide.testing:def:324: false
 Evaluation done.

 [root at rhel6 checks]# sysctl -w kernel.randomize_va_space=1
 kernel.randomize_va_space = 1

 [root at rhel6 checks]# ./testcheck.py sysctl_kernel_randomize_va_space.xml
 Evaluating with OVAL tempfile :
 /tmp/sysctl_kernel_randomize_va_spacefPriXs.xml
 Definition oval:scap-security-guide.testing:def:324: false
 Evaluation done.

 [root at rhel6 checks]# sysctl -w kernel.randomize_va_space=2
 kernel.randomize_va_space = 2

 [root at rhel6 checks]# ./testcheck.py sysctl_kernel_randomize_va_space.xml
 Evaluating with OVAL tempfile :
 /tmp/sysctl_kernel_randomize_va_space5oyOdN.xml
 Definition oval:scap-security-guide.testing:def:324: true
 Evaluation done.

 Resolving as worksforme.  IIRC this behavior was fixed as a result of your
 ticket some time ago, however we never closed it out. Thank you for
 reporting!

-- 
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/201#comment:2>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide


More information about the scap-security-guide mailing list