Mailinglist Archive: opensuse-features (105 mails)

< Previous Next >
[New: openFATE 313171] enable full heap randomisation
Feature added by: Ludwig Nussel (lnussel)

Feature #313171, revision 1
Title: enable full heap randomisation

openSUSE Distribution: Unconfirmed
Priority
Requester: Important

Requested by: Ludwig Nussel (lnussel)
Partner organization: openSUSE.org

Description:
set kernel.randomize_va_space=2 to enable full heap randomisation. Citing
sysctl/kernel.txt: 2 - Additionally enable heap randomization. This is the
default if CONFIG_COMPAT_BRK is disabled. There are a few legacy applications
out there (such as some ancient versions of libc.so.5 from 1996) that assume
that brk area starts just after the end of the code+bss. These applications
break when start of the brk area is randomized. There are however no known
non-legacy applications that would be broken this way, so for most systems it
is safe to choose full randomization.

Systems with ancient and/or broken binaries should be configured with
CONFIG_COMPAT_BRK enabled, which excludes the heap from process address space
randomization.


--
openSUSE Feature:
https://features.opensuse.org/313171

< Previous Next >
List Navigation
Follow Ups
References