florianutz / ubuntu2004_cis

Ubuntu CIS Hardening Ansible Role
MIT License
108 stars 67 forks source link

1.6.1 NX support fails on system with many logs #28

Open rumherb opened 3 years ago

rumherb commented 3 years ago

dmesg log is often limited. So the rule 1.6.1 fails and breaks continuation of the role even while NX protection is active. An alternate working solution would be: journalctl -b | grep 'Execute Disable' | grep 'protection: active'

this also works with Ubuntu 18.04 and on servers with a very long uptime.