[PATCH 2/2] changed kernel.randomize_va_space value to 2
Steve Grubb
sgrubb at redhat.com
Thu Jan 24 14:12:30 UTC 2013
On Wednesday, January 23, 2013 06:49:36 PM Shawn Wells wrote:
> It was bugging me why we chose randomize_va_space=1 instead of 2. Turns
> out the USGCB for RHEL5 has it set to 1, so we must have just inherited
> it. Made a note that USGCB for RHEL6 should have this set as 2.
The USGCB on RHEL5 sets it to 1 because you only have 0 or 1 to pick from on
the 2.6.18 kernel. The 2.6.32 kernel allows a third option. So, this is a case
where the code changed and inheriting content without updating was the
problem. In any event, its fixed. :-)
-Steve
More information about the scap-security-guide
mailing list