Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #76001
| From | intrigeri <intrigeri@boum.org> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#1016056: src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y |
| Date | 2022-07-26 10:40 +0200 |
| Message-ID | <ENogF-dUZt-11@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
Source: linux Version: 5.18.14-1 Severity: wishlist User: tails-dev@boum.org Usertags: hardening Hi! Please consider setting CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y (5.13 or newer). This enables a security feature with low performance overhead. Original pull request: https://lkml.iu.edu/hypermail/linux/kernel/2104.3/01302.html Ubuntu 22.04 LTS has this setting enabled by default. KSPP recommends enabling it: https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings Thanks for your attention, cheers! -- intrigeri
Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread
Bug#1016056: src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y intrigeri <intrigeri@boum.org> - 2022-07-26 10:40 +0200 Bug#1016056: src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y Diederik de Haas <didi.debian@cknow.org> - 2022-07-26 14:00 +0200 Bug#1016056: marked as done (src:linux: Please enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-12-22 22:40 +0100
csiph-web