Remaining false positives

Rodney L. Mercer rmercer at harris.com
Wed Jan 22 17:04:53 UTC 2014


On Wed, 2014-01-15 at 12:38 -0700, Andrew Gilmore wrote:
> 4) enable_execshield and sysctl_kernel_randomize_va_space are failing,
> although sysctl shows correct results

This one requires that entries be placed in /etc/sysctl.conf to pass,
despite sysctl showing correct results.

# egrep "randomize|exec" /etc/sysctl.conf
kernel.exec-shield = 1
kernel.randomize_va_space = 2




More information about the scap-security-guide mailing list