APPLIED: [PATCH 0/8][F] Kernel hardening config changes
Seth Forshee
seth.forshee at canonical.com
Tue Jan 21 23:17:26 UTC 2020
On Sun, Jan 19, 2020 at 01:10:21PM +0000, Tyler Hicks wrote:
> Adjust seven config options in order to follow best practices for kernel
> hardening. Some options are useful to prevent attacks (run-time sanity
> checks, reduce attack surface, etc.) while others are useful to detect
> attacks using logged information.
>
> These changes follow the recommendations of the Kernel Self Protection
> Project:
>
> https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
>
> None of these changes should have a noticeable affect on performance.
Applied to focal/master-next, thanks!
More information about the kernel-team
mailing list