EM 13c: exec-shield Parameter Is Configurable on RHEL/OL 7 and Linux UEK Kernel Machines Which Shows Wrong On EM Host Compliance Rule Page (Doc ID 2457444.1)

Last updated on JUNE 22, 2021

Applies to:

Symptoms

'Executable Stack Disabled' Host compliance rule from 13c EM console, shows RHEL 7 host in violation which is wrong because exec-shield os parameter is always disabled and there is no way to change this parameter, check the below

'Executable Stack Disabled' value depends on exec-shield os parameter whose value returned by script <Agent_Home>/sysman/admin/scripts/executestack.pl on agent machine during metric collection

In RHEL6/OL6, exec-shield os parameter is configurable, so executing script <Agent_Home>/sysman/admin/scripts/executestack.pl on agent machine will return the below
em_result=disabled

In RHEL7/OL7, exec-shield os parameter is disabled by default and there in no way to change this parameter at OS level, so executing script <Agent_Home>/sysman/admin/scripts/executestack.pl on agent machine will return the below
em_result=disabled

Similarly in Linux UEK Kernel machines, exec-shield os parameter is disabled by default and there in no way to change this parameter at OS level, so executing script <Agent_Home>/sysman/admin/scripts/executestack.pl on agent machine will return the below
em_result=disabled 

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.