[PATCH] Please Randomize Heap Space too

Kenneth Stailey kstailey.lists at gmail.com
Wed Jan 16 00:25:52 UTC 2013


Setting kernel.randomize_va_space = 2 does what setting it to "1" does plus
it enables heap randomization too.  It is recommended by Red Hat, see
https://access.redhat.com/knowledge/solutions/69124

Signed-off-by: Kenneth Stailey <kstailey.lists at gmail.com>
---
 RHEL6/input/checks/templates/sysctl_values.csv | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/RHEL6/input/checks/templates/sysctl_values.csv b/RHEL6/input/checks/templates/sysctl_values.csv
index 00d6b9a..787aa5c 100644
--- a/RHEL6/input/checks/templates/sysctl_values.csv
+++ b/RHEL6/input/checks/templates/sysctl_values.csv
@@ -1,5 +1,5 @@
 kernel.exec-shield,1
-kernel.randomize_va_space,1
+kernel.randomize_va_space,2
 net.ipv4.conf.all.accept_redirects,0
 net.ipv4.conf.all.accept_source_route,0
 net.ipv4.conf.all.log_martians,1
-- 
1.8.1.1



More information about the scap-security-guide mailing list