Below is a Unix system configuration file below which sets kernel parameters upon booting. Which parameter did the systems administrator set as a defense against buffer overflow attacks?

The correct answer is B. noexec_user_stack. One defense against buffer overflow attacks is to configure the system to not allow code to be executed in the stack. The parameters max_nprocs and maxuprc dictate the number of processes that can run on a system or be created by a user, respectively. Setting either of these…

Vulnerability Exploitation & Privilege Escalation

Question

Exhibit

Options

Asegkpsize
Bnoexec_user_stack
Cdefault_stksize
Dmax_nprocs
Emaxuprc

How the community answered

(27 responses)

A
4% (1)
B
78% (21)
D
7% (2)
E
11% (3)

Explanation

One defense against buffer overflow attacks is to configure the system to not allow code to be executed in the stack. The parameters max_nprocs and maxuprc dictate the number of processes that can run on a system or be created by a user, respectively. Setting either of these values too low could cause a denial of service. default_stksize sets the minimum stack size for each thread. segkpsize limits the amount of pageable kernel memory.

Topics

#buffer overflow defense#noexec_user_stack#kernel parameters#stack protection

Community Discussion

No community discussion yet for this question.

Full GCIH Practice