Remaining false positives

Shawn Wells shawn at redhat.com
Wed Jan 22 19:08:08 UTC 2014


On 1/22/14, 12:04 PM, Rodney L. Mercer wrote:
> On Wed, 2014-01-15 at 12:38 -0700, Andrew Gilmore wrote:
>> 4) enable_execshield and sysctl_kernel_randomize_va_space are failing,
>> although sysctl shows correct results
> This one requires that entries be placed in /etc/sysctl.conf to pass,
> despite sysctl showing correct results.
>
> # egrep "randomize|exec" /etc/sysctl.conf
> kernel.exec-shield = 1
> kernel.randomize_va_space = 2

Odd. About to hop on a long plane ride, planning to spend the next 5hrs 
working through SSG. Added this thread to the list.


More information about the scap-security-guide mailing list