Detections
Analytics

1.324 OL09-00-002423

Information

OL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.

GROUP ID: V-271761
RULE ID: SV-271761r1091995

ASLR makes it more difficult for an attacker to predict the location of attack code they have introduced into a process' address space during an attempt at exploitation. Additionally, ASLR makes it more difficult for an attacker to know the location of existing code to repurpose it using return-oriented programming (ROP) techniques.

Solution

Configure OL 9 to implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.

Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:

kernel.randomize_va_space = 2

Reload settings from all system configuration files with the following command:

$ sudo sysctl --system

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-16, CCI|CCI-002824, Rule-ID|SV-271761r1091995_rule, STIG-ID|OL09-00-002423, Vuln-ID|V-271761

Plugin: Unix

Control ID: 387650dd8e8f59eb864c73e9439183c96a3fac423bab3d7c673d242cd9aabe2f