{{{ oval_metadata("The kernel runtime parameter 'kernel.exec-shield' should not be disabled and set to 1 on 32-bit systems.") }}} {{# products that are available also in a 32 bits form #}} {{% if "rhel" not in product and product != "fedora" %}} {{% endif %}}
/etc/sysctl.conf
^[\s]*kernel.exec-shield[\s]*=[\s]*1[\s]*$
1
kernel.exec-shield
1
{{{ grub2_boot_path }}}/grub.cfg
[\s]*noexec[\s]*=[\s]*off
1