Message ID | 20200119131029.23160-1-tyhicks@canonical.com |
---|---|
Headers | show |
Series | Kernel hardening config changes | expand |
On Sun, Jan 19, 2020 at 01:10:21PM +0000, Tyler Hicks wrote: > Adjust seven config options in order to follow best practices for kernel > hardening. Some options are useful to prevent attacks (run-time sanity > checks, reduce attack surface, etc.) while others are useful to detect > attacks using logged information. > > These changes follow the recommendations of the Kernel Self Protection > Project: > > https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings > > None of these changes should have a noticeable affect on performance. Applied to focal/master-next, thanks!