Re: Fedora 37: Add kernel parameters that help prevent local exploits

Thu, 19 May 2022 16:53:07 -0700 

I thought vsyscalls were obsolete, but leaving them, enabled doesn't really 
impact security too much. Regarding performance, `page_alloc.shuffle=1` can 
increase performance, and `slab_nomerge init_on_alloc=1 init_on_free=1 pti=on 
randomize_kstack_offset=on` do not have a very noticeable performance impact, 
it will almost never be noticed in real use cases unless you specifically look 
for it.
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to