(type:SYSCALL SYSCALL:personality a0:40000) OR (type:EXECVE a0:sysctl a1:\-w a2:kernel.randomize_va_space=0)