ACK: [PATCH][IMPISH] UBUNTU: [Config] Enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT

Seth Forshee seth.forshee at canonical.com
Fri Jul 9 20:01:50 UTC 2021


On Fri, Jun 25, 2021 at 09:42:17AM +0100, Colin King wrote:
> From: Colin Ian King <colin.king at canonical.com>
> 
> Kernel stack offset randomization is a useful security feature
> that should be enabled. Benchmarking showed that the impact is
> within the noise of various microbenchmarks so I believe this
> has some added benefit with minimal performance impact. The
> security folk believe this is worth enabling, so lets switch
> it on.
> 
> Signed-off-by: Colin Ian King <colin.king at canonical.com>

Seems like a good idea to me.

Acked-by: Seth Forshee <seth.forshee at canonical.com>



More information about the kernel-team mailing list