Detections
Analytics

1.344 ALMA-09-044900

Information

AlmaLinux OS 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.

GROUP ID: V-269452
RULE ID: SV-269452r1050335

ASLR makes it more difficult for an attacker to predict the location of attack code they have introduced into a process' address space during an attempt at exploitation.

Additionally, ASLR makes it more difficult for an attacker to know the location of existing code to repurpose it using return oriented programming (ROP) techniques.

Solution

Configure the system to enable ASLR with the following command:

$ echo 'kernel.randomize_va_space = 2' > /etc/sysctl.d/60-aslr.conf

Reload settings from all system configuration files with the following command:

$ sysctl --system

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-16, CCI|CCI-002824, Rule-ID|SV-269452r1050335_rule, STIG-ID|ALMA-09-044900, Vuln-ID|V-269452

Plugin: Unix

Control ID: b1844834d9abe278a79ac1922adbb51d8016ed13f82f67f7a6155d5e1f466486