Cis Ubuntu1204 V110 4 3

Enable Randomized Virtual Memory Region Placement

cyberstrikeus Updated

File contents

4.3 Enable Randomized Virtual Memory Region Placement (Scored)

Profile Applicability

  • Level 1

Description

Set the system flag to force randomized virtual memory region placement.

Rationale

Randomly placing virtual memory regions will make it difficult to write memory page exploits as the memory placement will be consistently shifting.

Audit Procedure

Using Command Line

Perform the following to determine if virtual memory is randomized:

sysctl kernel.randomize_va_space

Expected Result

The output should be: kernel.randomize_va_space = 2

Remediation

Using Command Line

Add the following line to the /etc/sysctl.conf file:

kernel.randomize_va_space = 2

Default Value

By default, kernel.randomize_va_space is set to 2 on Ubuntu 12.04.

References

  • CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0

Profile

Level 1 - Scored

cyberstrikeus/cyberstrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-12-04-lts-server-benchmark/cis-ubuntu1204-v110-4-3 commit 1220f71727

Frequently asked questions

npx skillmds@latest add cyberstrikeus/cis-ubuntu1204-v110-4-3