Set vm.mmap_min_addr to 4096 to block a security problem.

config/etc/sysctl.conf

@@ -23,3 +23,4 @@ net.ipv4.conf.all.log_martians = 1
 
 kernel.printk = 1 4 1 7
 vm.swappiness=0
+vm.mmap_min_addr = 4096

config/rootfiles/core/33/update.sh

@@ -25,12 +25,16 @@
 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
 #
 #Stop services
-
+#
+#Set vm.mmap_min_addr to block a kernel security hole
+grep -v "vm.mmap_min_addr" /etc/sysctl.conf > /var/tmp/sysctl.conf.tmp
+echo "vm.mmap_min_addr = 4096" >> /var/tmp/sysctl.conf.tmp
+mv /var/tmp/sysctl.conf.tmp /etc/sysctl.conf
+sysctl -w vm.mmap_min_addr="4096"
 #
 extract_files
 #
 #Start services
-
 #
 #Update Language cache
 perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"