On Tue, Feb 05, 2019 at 11:11:06PM +0000, Kees Cook wrote: > FWIW, distros have enabled it by default for a while. Here's Ubuntu, > for example: > > and Fedora too:
Also Debian: $ grep SLAB_FREELIST /boot/config-4.19.0-1-amd64 CONFIG_SLAB_FREELIST_RANDOM=y CONFIG_SLAB_FREELIST_HARDENED=y linux (4.15.4-1) unstable; urgency=medium * Switch to SLUB as kernel allocator. (Closes: #862718) - Enable SLUB_DEBUG, SLAB_FREELIST_HARDENED except on armel/marvell. (Closes: #883069)