Add `slab_nomerge init_on_alloc=1 init_on_free=1 page_alloc.shuffle=1 pti=on
randomize_kstack_offset=on vsyscall=none ` as default kernel command line
arguments. This can help prevent local exploits by making it harder to exploit
the kernel. I do not think there will be any breakage, I have been
Add `slab_nomerge init_on_alloc=1 init_on_free=1 page_alloc.shuffle=1 pti=on
randomize_kstack_offset=on vsyscall=none ` as default kernel command line
arguments. This can help prevent local exploits by making it harder to exploit
the kernel. I do not think there will be any breakage, I have been