Fedora 37: Add kernel parameters that help prevent local exploits

2022-05-18 Thread Hellosway Here via devel
Add `slab_nomerge init_on_alloc=1 init_on_free=1 page_alloc.shuffle=1 pti=on randomize_kstack_offset=on vsyscall=none ` as default kernel command line arguments. This can help prevent local exploits by making it harder to exploit the kernel. I do not think there will be any breakage, I have been

Fedora 37: Add kernel parameters that help prevent local exploits

2022-05-18 Thread Hellosway Here via devel
Add `slab_nomerge init_on_alloc=1 init_on_free=1 page_alloc.shuffle=1 pti=on randomize_kstack_offset=on vsyscall=none ` as default kernel command line arguments. This can help prevent local exploits by making it harder to exploit the kernel. I do not think there will be any breakage, I have been