Commit de8cb01d authored by anonym's avatar anonym
Browse files

Merge remote-tracking branch 'origin/feature/11840-improve-aslr-for-mmap' into devel

Fix-committed: #11840
parents 2cd9f293 16641657
......@@ -93,3 +93,10 @@ kernel address map from some external source. This is not hard, but
certainly not all malware has such functionality.
For this reason, we also make sure to purge `/boot/`.
#### `vm.mmap_rnd_bits`, `vm.mmap_rnd_compat_bits`
These settings are
[[!tails_gitweb config/chroot_local-includes/etc/sysctl.d/mmap_aslr.conf desc="set to the maximum supported value"]]
in order to improve ASLR effectiveness for mmap, at the cost of
increased address-space fragmentation.
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment