How to Enable/Disable Kernel Kaslr, Smep and Smap

How to check whether SMP is enabled or disabled in the kernel?

Can I assume
that with the keyword SMP produced by uname -a, the kernel is
configured as SMP?

Yes. The version string returned by uname is generated when kernel is compiled.

How to detect in runtime is KASLR enabled or disabled?

Check your kernel command line. (example on debian 8)

$ cat /proc/cmdline
BOOT_IMAGE=/vmlinuz-`uname -r` root=/dev/mapper/`hostname`-root ro quiet

kASLR is available starting with Ubuntu 14.10 but it is not enabled by
default. Specify the "kaslr" option on the kernel command line to use
kASLR.

Note: Enabling kASLR will disable the ability to enter hibernation mode.

source: https://wiki.ubuntu.com/Security/Features



Related Topics



Leave a reply



Submit