[CentOS-devel] Need info about kernel file "randomize_va_space"

Hi,

The file "/proc/sys/kernel/randomize_va_space" has write permission for user as below:
[root at shagun ~]# ls -lrtZ /proc/sys/kernel/randomize_va_space
rw-r--r--. root root system_u:object_r:proc_security_t:s0 /proc/sys/kernel/randomize_va_space

If we want to change this permission to read only permission for the user. Is it possible?

And i found the code also:

kernel/sysctl.c @@ -1130,7 +1130,11 @@ static struct ctl_table kern_table[] = { .procname = "randomize_va_space", .data = &randomize_va_space, .maxlen = sizeof(int), +#ifdef CONFIG_ASLR_SYSCTL_READ_ONLY + .mode = 0444, +#else .mode = 0644, +#endif

Can we make it as 0444, currently randomize_va_space is 644?

Please suggest.

Regards,
Shagun
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos-devel/attachments/20190626/39bdbb0c/attachment.html>