APPLIED: [PATCH 0/8][F] Kernel hardening config changes

Seth Forshee seth.forshee at canonical.com
Tue Jan 21 23:17:26 UTC 2020


On Sun, Jan 19, 2020 at 01:10:21PM +0000, Tyler Hicks wrote:
> Adjust seven config options in order to follow best practices for kernel
> hardening. Some options are useful to prevent attacks (run-time sanity
> checks, reduce attack surface, etc.) while others are useful to detect
> attacks using logged information.
> 
> These changes follow the recommendations of the Kernel Self Protection
> Project:
> 
>  https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
> 
> None of these changes should have a noticeable affect on performance.

Applied to focal/master-next, thanks!



More information about the kernel-team mailing list