Add the comments about vm.mmap_rnd_bits and `vm.mmap_rnd_compat_bit…

…s` sysctls Refers to #146
a13xp0p0v · Aug 11, 2024 · 0f27645 · 0f27645
1 parent 9d327ea
commit 0f27645
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py
@@ -684,7 +684,8 @@ def normalize_cmdline_options(option: str, value: str) -> str:
 #    what about bpf_jit_enable?
 #    vm.mmap_min_addr has a good value
 #    nosmt sysfs control file
-#    vm.mmap_rnd_bits=max (?)
+#    vm.mmap_rnd_bits=max
+#    vm.mmap_rnd_compat_bits=max
 #    abi.vsyscall32 (any value except 2)
 #    net.ipv4.tcp_syncookies=1 (?)