[PATCH 2/2] changed kernel.randomize_va_space value to 2

Steve Grubb sgrubb at redhat.com
Thu Jan 24 14:12:30 UTC 2013


On Wednesday, January 23, 2013 06:49:36 PM Shawn Wells wrote:
> It was bugging me why we chose randomize_va_space=1 instead of 2. Turns
> out the USGCB for RHEL5 has it set to 1, so we must have just inherited
> it. Made a note that USGCB for RHEL6 should have this set as 2.

The USGCB on RHEL5 sets it to 1 because you only have 0 or 1 to pick from on 
the 2.6.18 kernel. The 2.6.32 kernel allows a third option. So, this is a case 
where the code changed and inheriting content without updating was the 
problem. In any event, its fixed. :-)

-Steve


More information about the scap-security-guide mailing list