Make sure vm.mmap_min_addr is 65536

Signed-off-by: Tommy <[email protected]>

Author: TommyTran732

etc/sysctl.d/99-server.conf

@@ -113,8 +113,10 @@ net.ipv4.tcp_sack = 0
 net.ipv4.tcp_dsack = 0
 
 # Improve ALSR effectiveness for mmap.
+# vm.mmap_min_addr = 65536 is the already the default in Fedora.
 vm.mmap_rnd_bits = 32
 vm.mmap_rnd_compat_bits = 16
+vm.mmap_min_addr = 65536
 
 # https://madaidans-insecurities.github.io/guides/linux-hardening.html#sysctl-kernel
 # Restrict userfaultfd to CAP_SYS_PTRACE.

etc/sysctl.d/99-workstation.conf

@@ -114,8 +114,10 @@ net.ipv4.tcp_sack = 0
 net.ipv4.tcp_dsack = 0
 
 # Improve ALSR effectiveness for mmap.
+# vm.mmap_min_addr = 65536 is the already the default in Fedora.
 vm.mmap_rnd_bits = 32
 vm.mmap_rnd_compat_bits = 16
+vm.mmap_min_addr = 65536
 
 # https://madaidans-insecurities.github.io/guides/linux-hardening.html#sysctl-kernel
 # Restrict userfaultfd to CAP_SYS_PTRACE.