每日一记：Linux 关闭ASLR是否需要重启？

答案：不用重启。

想了解更多的同学继续往下看：

最近在处理Oracle问题时遇到一个因ASLR开启导致的问题。

经过查阅mos文档，建议关闭ASLR。

那么有人会问了，关闭ASLR需不需要重启服务器？生产可不能随便重启。

这里实战测试一下：

## 关闭前验证
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007fff593a6000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f482d04e000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f482ce4a000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f482ca87000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f482d599000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffe366a1000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f4e59c7d000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f4e59a79000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f4e596b6000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f4e5a1c8000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffee8194000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007fb5d6dea000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007fb5d6be6000)
	libc.so.6 => /lib64/libc.so.6 (0x00007fb5d6823000)
	/lib64/ld-linux-x86-64.so.2 (0x00007fb5d7335000)

## 关闭ASLR
[root@localhost ~]# echo 0 > /proc/sys/kernel/randomize_va_space

## 关闭后验证
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffff7ffa000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007ffff7889000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007ffff7685000)
	libc.so.6 => /lib64/libc.so.6 (0x00007ffff72c2000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffff7dd4000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffff7ffa000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007ffff7889000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007ffff7685000)
	libc.so.6 => /lib64/libc.so.6 (0x00007ffff72c2000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffff7dd4000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffff7ffa000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007ffff7889000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007ffff7685000)
	libc.so.6 => /lib64/libc.so.6 (0x00007ffff72c2000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffff7dd4000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffff7ffa000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007ffff7889000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007ffff7685000)
	libc.so.6 => /lib64/libc.so.6 (0x00007ffff72c2000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffff7dd4000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffff7ffa000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007ffff7889000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007ffff7685000)
	libc.so.6 => /lib64/libc.so.6 (0x00007ffff72c2000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffff7dd4000)

## 重新调整为默认值
[root@localhost ~]# echo 2 > /proc/sys/kernel/randomize_va_space

## 再次验证
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007fff351e0000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f4c02fe9000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f4c02de5000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f4c02a22000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f4c03534000)
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffc6f7fb000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f6f88a9d000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f6f88899000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f6f884d6000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f6f88fe8000)
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffe623fe000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f33448fa000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f33446f6000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f3344333000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f3344e45000)
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffdf4edb000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007fec81652000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007fec8144e000)
	libc.so.6 => /lib64/libc.so.6 (0x00007fec8108b000)
	/lib64/ld-linux-x86-64.so.2 (0x00007fec81b9d000)