[PATCH 2/2] changed kernel.randomize_va_space value to 2

David Smith dsmith at eclipse.ncsc.mil
Fri Jan 18 13:16:21 UTC 2013


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 RHEL6/input/system/permissions/execution.xml |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/system/permissions/execution.xml b/RHEL6/input/system/permissions/execution.xml
index 59b103c..2e85c05 100644
--- a/RHEL6/input/system/permissions/execution.xml
+++ b/RHEL6/input/system/permissions/execution.xml
@@ -136,8 +136,8 @@ address range.</rationale>
 
 <Rule id="enable_randomize_va_space" severity="medium">
 <title>Enable Randomized Layout of Virtual Address Space</title>
-<description><sysctl-desc-macro sysctl="kernel.randomize_va_space" value="1" /></description>
-<ocil><sysctl-check-macro sysctl="kernel.randomize_va_space" value="1" /></ocil>
+<description><sysctl-desc-macro sysctl="kernel.randomize_va_space" value="2" /></description>
+<ocil><sysctl-check-macro sysctl="kernel.randomize_va_space" value="2" /></ocil>
 <rationale> Address space layout randomization (ASLR) makes it more difficult
 for an attacker to predict the location of attack code he or she has introduced
 into a process's address space during an attempt at exploitation.  Additionally, ASLR also
-- 
1.7.1



More information about the scap-security-guide mailing list