•mmap_min_addr forbids users from mapping low addresses
1. First available in July 2007
2. Several circumventions were found
3. Still disabled on many machines
•Protects NULL, but not other invalid pointers!
Disallow mapping memory at low addresses:
sysctl -w vm.mmap_min_addr = 65536 (0x10000)