We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 95c8265 commit 6661b3fCopy full SHA for 6661b3f
rules/linux/auditd/lnx_auditd_disable_aslr_protection.yml
@@ -1,6 +1,6 @@
1
title: Disabling aslr via personality syscall - Linux
2
id: e497a24e-9345-4a62-9803-b06d7d7cb132
3
-status: high
+status: stable
4
description: |
5
Detects the use of the `personality` syscall with the ADDR_NO_RANDOMIZE flag (0x0040000),
6
which disables Address Space Layout Randomization (ASLR) in Linux. This is often used by attackers
0 commit comments