← Back to Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide

V-269452

CAT II (Medium)

AlmaLinux OS 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.

Rule ID

SV-269452r1050335_rule

STIG

Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide

Version

V1R6

CCIs

CCI-002824

Discussion

ASLR makes it more difficult for an attacker to predict the location of attack code they have introduced into a process' address space during an attempt at exploitation. Additionally, ASLR makes it more difficult for an attacker to know the location of existing code to repurpose it using return oriented programming (ROP) techniques.

Check Content

Verify AlmaLinux OS 9 is implementing ASLR with the following command:

$ sysctl kernel.randomize_va_space

kernel.randomize_va_space = 2

If "kernel.randomize_va_space" is not set to "2", or is missing, this is a finding.

Fix Text

Configure the system to enable ASLR with the following command:

$ echo 'kernel.randomize_va_space = 2' > /etc/sysctl.d/60-aslr.conf

Reload settings from all system configuration files with the following command:

$ sysctl --system