每日一记:Linux 关闭ASLR是否需要重启?

答案:不用重启。

想了解更多的同学继续往下看:

最近在处理Oracle问题时遇到一个因ASLR开启导致的问题。

经过查阅mos文档,建议关闭ASLR。

那么有人会问了,关闭ASLR需不需要重启服务器?生产可不能随便重启。

这里实战测试一下:

## 关闭前验证
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007fff593a6000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f482d04e000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f482ce4a000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f482ca87000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f482d599000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffe366a1000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f4e59c7d000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f4e59a79000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f4e596b6000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f4e5a1c8000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffee8194000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007fb5d6dea000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007fb5d6be6000)
	libc.so.6 => /lib64/libc.so.6 (0x00007fb5d6823000)
	/lib64/ld-linux-x86-64.so.2 (0x00007fb5d7335000)

## 关闭ASLR
[root@localhost ~]# echo 0 > /proc/sys/kernel/randomize_va_space

## 关闭后验证
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffff7ffa000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007ffff7889000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007ffff7685000)
	libc.so.6 => /lib64/libc.so.6 (0x00007ffff72c2000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffff7dd4000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffff7ffa000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007ffff7889000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007ffff7685000)
	libc.so.6 => /lib64/libc.so.6 (0x00007ffff72c2000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffff7dd4000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffff7ffa000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007ffff7889000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007ffff7685000)
	libc.so.6 => /lib64/libc.so.6 (0x00007ffff72c2000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffff7dd4000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffff7ffa000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007ffff7889000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007ffff7685000)
	libc.so.6 => /lib64/libc.so.6 (0x00007ffff72c2000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffff7dd4000)
[root@localhost ~]# 
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffff7ffa000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007ffff7889000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007ffff7685000)
	libc.so.6 => /lib64/libc.so.6 (0x00007ffff72c2000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffff7dd4000)

## 重新调整为默认值
[root@localhost ~]# echo 2 > /proc/sys/kernel/randomize_va_space

## 再次验证
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007fff351e0000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f4c02fe9000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f4c02de5000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f4c02a22000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f4c03534000)
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffc6f7fb000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f6f88a9d000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f6f88899000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f6f884d6000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f6f88fe8000)
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffe623fe000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007f33448fa000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f33446f6000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f3344333000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f3344e45000)
[root@localhost ~]# ldd /bin/bash
	linux-vdso.so.1 (0x00007ffdf4edb000)
	libtinfo.so.6 => /lib64/libtinfo.so.6 (0x00007fec81652000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007fec8144e000)
	libc.so.6 => /lib64/libc.so.6 (0x00007fec8108b000)
	/lib64/ld-linux-x86-64.so.2 (0x00007fec81b9d000)

 

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值