-
- GentOscar checksec.sh # ./checksec --kernel
- * Kernel protection information:
-
- Description - List the status of kernel protection mechanisms. Rather than
- inspect kernel mechanisms that may aid in the prevention of exploitation of
- userspace processes, this option lists the status of kernel configuration
- options that harden the kernel itself against attack.
-
- Kernel config:
- /proc/config.gz
-
- Vanilla Kernel ASLR: Full
- Protected symlinks: Enabled
- Protected hardlinks: Enabled
- Ipv4 reverse path filtering: Enabled
- Ipv6 reverse path filtering: Disabled
- Kernel heap randomization: Enabled
- GCC stack protector support: Enabled
- Restrict /dev/mem access: Disabled
- Restrict /dev/kmem access: Disabled
-
- * X86 only:
- Strict user copy checks: Disabled
- Address space layout randomization: Disabled
-
- * Selinux: No SELinux
-
- SELinux infomation available here:
- http://selinuxproject.org/
-
- * grsecurity / PaX: Custom GRKERNSEC
-
- Non-executable kernel pages: Disabled
- Non-executable pages: Disabled
- Paging Based Non-executable pages: Disabled
- Restrict MPROTECT: Disabled
- Address Space Layout Randomization: Enabled
- Randomize Kernel Stack: Enabled
- Randomize User Stack: Enabled
- Randomize MMAP Stack: Enabled
- Sanitize freed memory: Disabled
- Sanitize Kernel Stack: Disabled
- Prevent userspace pointer deref: Disabled
- Prevent kobject refcount overflow: Disabled
- Bounds check heap object copies: Disabled
- JIT Hardening: No BPF JIT
- Thread Stack Random Gaps: Disabled
- Disable writing to kmem/mem/port: Disabled
- Disable privileged I/O: Disabled
- Harden module auto-loading: Enabled
- Chroot Protection: Disabled
- Deter ptrace process snooping: Disabled
- Larger Entropy Pools: Disabled
- TCP/UDP Blackhole: Disabled
- Deter Exploit Bruteforcing: Enabled
- Hide kernel symbols: Enabled
- Pax softmode: Disabled
-