diff options
author | Nicolas Braud-Santoni <nicoo@debian.org> | 2020-01-31 05:36:00 +0100 |
---|---|---|
committer | Nicolas Braud-Santoni <nicolas@braud-santoni.eu> | 2020-01-31 05:36:00 +0100 |
commit | 6b05155fb16e1756c1b5769791d145d34c9feb3f (patch) | |
tree | 93779a853fa9f10dabe6a54d5833135da7481b55 | |
parent | init.d/service.fedora: Disable potentially-vulnerable kernel features (diff) | |
download | haveged-6b05155fb16e1756c1b5769791d145d34c9feb3f.tar.xz haveged-6b05155fb16e1756c1b5769791d145d34c9feb3f.zip |
init.d/service.fedora: Enforce W^X (memory cannot be writeable and executable)
-rw-r--r-- | init.d/service.fedora | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/init.d/service.fedora b/init.d/service.fedora index 5ce96de..3e19a4e 100644 --- a/init.d/service.fedora +++ b/init.d/service.fedora @@ -24,6 +24,7 @@ RestrictNamespaces=true RestrictRealtime=true LockPersonality=true +MemoryDenyWriteExecute=true [Install] WantedBy=sysinit.target |