My Oracle Support Banner

EM 13c: exec-shield Parameter Is Configurable on RHEL/OL 7 and Linux UEK Kernel Machines Which Shows Wrong On EM Host Compliance Rule Page (Doc ID 2457444.1)

Last updated on MAY 02, 2020

Applies to:

Enterprise Manager Base Platform - Version 13.2.0.0.0 and later
Information in this document applies to any platform.

Symptoms

'Executable Stack Disabled' Host compliance rule from 13c EM console, shows RHEL 7 host in violation which is wrong because exec-shield os parameter is always disabled and there is no way to change this parameter, check the below

'Executable Stack Disabled' value depends on exec-shield os parameter whose value returned by script <Agent_Home>/sysman/admin/scripts/executestack.pl on agent machine during metric collection

In RHEL6/OL6, exec-shield os parameter is configurable, so executing script <Agent_Home>/sysman/admin/scripts/executestack.pl on agent machine will return the below
em_result=disabled

In RHEL7/OL7, exec-shield os parameter is disabled by default and there in no way to change this parameter at OS level, so executing script <Agent_Home>/sysman/admin/scripts/executestack.pl on agent machine will return the below
em_result=disabled

Similarly in Linux UEK Kernel machines, exec-shield os parameter is disabled by default and there in no way to change this parameter at OS level, so executing script <Agent_Home>/sysman/admin/scripts/executestack.pl on agent machine will return the below
em_result=disabled 

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.