summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNicolas Braud-Santoni <nicoo@debian.org>2020-01-31 05:36:00 +0100
committerNicolas Braud-Santoni <nicolas@braud-santoni.eu>2020-01-31 05:36:00 +0100
commit6b05155fb16e1756c1b5769791d145d34c9feb3f (patch)
tree93779a853fa9f10dabe6a54d5833135da7481b55
parentinit.d/service.fedora: Disable potentially-vulnerable kernel features (diff)
downloadhaveged-6b05155fb16e1756c1b5769791d145d34c9feb3f.tar.xz
haveged-6b05155fb16e1756c1b5769791d145d34c9feb3f.zip
init.d/service.fedora: Enforce W^X (memory cannot be writeable and executable)
-rw-r--r--init.d/service.fedora1
1 files changed, 1 insertions, 0 deletions
diff --git a/init.d/service.fedora b/init.d/service.fedora
index 5ce96de..3e19a4e 100644
--- a/init.d/service.fedora
+++ b/init.d/service.fedora
@@ -24,6 +24,7 @@ RestrictNamespaces=true
RestrictRealtime=true
LockPersonality=true
+MemoryDenyWriteExecute=true
[Install]
WantedBy=sysinit.target