Re: Fedora 37: Add kernel parameters that help prevent local exploits

[Glorious Hellosway via devel]

I thought vsyscalls were obsolete, but leaving them, enabled doesn't really 
impact security too much. Regarding performance, `page_alloc.shuffle=1` can 
increase performance, and `slab_nomerge init_on_alloc=1 init_on_free=1 pti=on 
randomize_kstack_offset=on` do not have a very noticeable performance impact, 
it will almost never be noticed in real use cases unless you specifically look 
for it.
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure