PHTN-67-000069 - The Photon operating system must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.

Information

ASLR makes it more difficult for an attacker to predict the location of attack code he or she has introduced into a process's address space during an attempt at exploitation. Additionally, ASLR also makes it more difficult for an attacker to know the location of existing code to repurpose it using return-oriented programming techniques.

Solution

Open /etc/sysctl.d/50-security-hardening.conf with a text editor.

Ensure that the 'randomize_va_space' is uncommented and set to the following:

kernel.randomize_va_space=2

At the command line, execute the following command:

# sysctl --system

Item Details

Audit Name: DISA STIG VMware vSphere 6.7 Photon OS v1r6

Category: SYSTEM AND INFORMATION INTEGRITY

Plugin: Unix

Control ID: 27fbee2360ccfe89a6092d7202120c7c4a69eb54d340735dbf653adea00e5337

Detections

Analytics

PHTN-67-000069 - The Photon operating system must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.

Information

Solution

See Also

Item Details