The NX||XD eventually fails on an active system

[tdewitt]

Ubuntu1804-CIS/tasks/section1.yml

Line 677 in dc95662

dmesg | grep -E "NX|XD" | grep " active"

dmesg will eventually roll over and this check will fail. Using journalctl -b is slowed but will work for longer. Example from a rather vanilla install of 18.04 server:

$ dmesg | wc -l
4070

$ journalctl -b | wc -l
549487

[umarizulkifli]

According to official CIS Benchmark documents the command should be

journalctl | grep 'protection: active'