[PATCH 2/2] changed kernel.randomize_va_space value to 2

David Smith dsmith at eclipse.ncsc.mil
Fri Jan 18 16:04:09 UTC 2013


Thanks for catching that typo.  I just pushed a fix for that, as well as 
the edited OVAL (and the related .csv file).


On 01/18/2013 08:47 AM, Shawn Wells wrote:
>
> On Jan 18, 2013, at 8:16 AM, David Smith<dsmith at eclipse.ncsc.mil>  wrote:
>
>> Signed-off-by: David Smith<dsmith at eclipse.ncsc.mil>
>> ---
>> RHEL6/input/system/permissions/execution.xml |    4 ++--
>> 1 files changed, 2 insertions(+), 2 deletions(-)
>>
>> diff --git a/RHEL6/input/system/permissions/execution.xml b/RHEL6/input/system/permissions/execution.xml
>> index 59b103c..2e85c05 100644
>> --- a/RHEL6/input/system/permissions/execution.xml
>> +++ b/RHEL6/input/system/permissions/execution.xml
>> @@ -136,8 +136,8 @@ address range.</rationale>
>>
>> <Rule id="enable_randomize_va_space" severity="medium">
>> <title>Enable Randomized Layout of Virtual Address Space</title>
>> -<description><sysctl-desc-macro sysctl="kernel.randomize_va_space" value="1" /></description>
>> -<ocil><sysctl-check-macro sysctl="kernel.randomize_va_space" value="1" /></ocil>
>> +<description><sysctl-desc-macro sysctl="kernel.randomize_va_space" value="2" /></description>
>> +<ocil><sysctl-check-macro sysctl="kernel.randomize_va_space" value="2" /></ocil>
>> <rationale>  Address space layout randomization (ASLR) makes it more difficult
>> for an attacker to predict the location of attack code he or she has introduced
>> into a process's address space during an attempt at exploitation.  Additionally, ASLR also
>> -- 
>> 1.7.1
>>
>> _______________________________________________
>> scap-security-guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
> Any chance you could update the OVAL too? The operand should be changed to "equals" with the new value of 2. I won't be on  laptop until later this afternoon to make the change myself.
>
> Ack to this piece though.
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide



More information about the scap-security-guide mailing list