Hi. We are using the CIS Benchmarck for SLES 12 for our lockdown. The 1.5.2 control has one check to see if NX/XD support is enabled by running the following command.

# dmesg | grep NX
NX (Execute Disable) protection: active
This works fine, except if the dmesg log fills up and NX protection line rotates off the log. Is there an alternative way one can use to show NX is enabled?

I know it's on by default on 64-bit kernels, but due to audits, we must have a way to show that it is enabled. Thank you.