[PATCH] Please Randomize Heap Space too
Kenneth Stailey
kstailey.lists at gmail.com
Wed Jan 16 00:25:52 UTC 2013
Setting kernel.randomize_va_space = 2 does what setting it to "1" does plus
it enables heap randomization too. It is recommended by Red Hat, see
https://access.redhat.com/knowledge/solutions/69124
Signed-off-by: Kenneth Stailey <kstailey.lists at gmail.com>
---
RHEL6/input/checks/templates/sysctl_values.csv | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/RHEL6/input/checks/templates/sysctl_values.csv b/RHEL6/input/checks/templates/sysctl_values.csv
index 00d6b9a..787aa5c 100644
--- a/RHEL6/input/checks/templates/sysctl_values.csv
+++ b/RHEL6/input/checks/templates/sysctl_values.csv
@@ -1,5 +1,5 @@
kernel.exec-shield,1
-kernel.randomize_va_space,1
+kernel.randomize_va_space,2
net.ipv4.conf.all.accept_redirects,0
net.ipv4.conf.all.accept_source_route,0
net.ipv4.conf.all.log_martians,1
--
1.8.1.1
More information about the scap-security-guide
mailing list