Kernel compiled with Stack Protector ?

[J Doe]

Hello,

In light of the recent report from Armis about the "BlueBorne" Bluetooth vulnerabilities that affect Linux (and other OS's), I was wondering if Ubuntu compiles the kernel with Stack Protector enabled (specifically for Ubuntu 16.04 LTS desktop and to a lesser extent 16.04 LTS server) ?

Secondly, is there a page that outlines the hardening steps that Ubuntu follows for ensuring kernel security ?

Thanks,

- J