RHEL-09-213070 - RHEL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.

Information

Address space layout randomization (ASLR) makes it more difficult for an attacker to predict the location of attack code they have introduced into a process' address space during an attempt at exploitation. Additionally, ASLR makes it more difficult for an attacker to know the location of existing code in order to repurpose it using return oriented programming (ROP) techniques.

Satisfies: SRG-OS-000433-GPOS-00193, SRG-OS-000480-GPOS-00227

Solution

Add or edit the following line in a system configuration file in the '/etc/sysctl.d/' directory:

kernel.randomize_va_space = 2

Reload settings from all system configuration files with the following command:

$ sudo sysctl --system

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_9_V2R1_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|CM-6b., 800-53|SI-16, CAT|II, CCI|CCI-000366, CCI|CCI-002824, Rule-ID|SV-257809r958928_rule, STIG-ID|RHEL-09-213070, Vuln-ID|V-257809

Plugin: Unix

Control ID: 1968949523aaef214a12afa62a258413ef929dd1e3c21e2fae3547ebbaa56d26