Oracle^® SuperCluster M8 and SuperCluster M7 Security Guide

Enable ASLR

Oracle Solaris tags many user binaries to enable address space layout randomization (ASLR). ASLR randomizes the starting address of key parts of an address space. This security defense mechanism can cause Return Oriented Programming (ROP) attacks to fail when they try to exploit software vulnerabilities. Zones inherit this randomized layout for their processes. Because the use of ASLR might not be optimal for all binaries, ASLR is configurable at the zone and binary level.

1. Log in to one of the compute servers and access the host console as superuser.

   See Log into a Compute Server.

2. Enable ASLR.

   # sxadm delcust aslr
   # sxadm info
   EXTENSION    STATUS                 CONFIGURATION
   aslr         enabled (tagged-files) System default (default)