From: Alexander Popov Date: Fri, 6 May 2022 22:21:00 +0000 (+0300) Subject: Add the comment about kernel.randomize_va_space X-Git-Tag: v0.6.1~163 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=9d342aac6484b2bc4eedc538e6875c8e2fe93699;p=kconfig-hardened-check.git Add the comment about kernel.randomize_va_space Thanks to @izh1979 for the idea. --- diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index 52f505d..8daa934 100644 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -58,11 +58,9 @@ # what about bpf_jit_enable? # kernel.unprivileged_bpf_disabled=1 # net.core.bpf_jit_harden=2 -# # vm.unprivileged_userfaultfd=0 # (at first, it disabled unprivileged userfaultfd, # and since v5.11 it enables unprivileged userfaultfd for user-mode only) -# # dev.tty.ldisc_autoload=0 # fs.protected_symlinks=1 # fs.protected_hardlinks=1 @@ -70,6 +68,7 @@ # fs.protected_regular=2 # fs.suid_dumpable=0 # kernel.modules_disabled=1 +# kernel.randomize_va_space = 2 # pylint: disable=missing-module-docstring,missing-class-docstring,missing-function-docstring