Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-03 13:29:59 -05:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #259 from raja-grewal/kfence

Browse Source 
Enable `kfence.sample_interval=100`
This commit is contained in:
Patrick Schleizer 2024-08-06 09:52:56 -04:00 committed by GitHub
commit 6bc039a430
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@ -146,9 +146,8 @@ configuration file.
- Provide the option to modify machine check exception handler. - Provide the option to modify machine check exception handler.
- Provide the option to enable the kernel Electric-Fence sampling-based memory - Enable the kernel Electric-Fence sampling-based memory safety error detector
safety error detector which can identify heap out-of-bounds access, use-after-free, which can identify heap out-of-bounds access, use-after-free, and invalid-free errors.
and invalid-free errors.
- Provide the option to disable 32 bit vDSO mappings. - Provide the option to disable 32 bit vDSO mappings.

2
etc/default/grub.d/40_kernel_hardening.cfg
View File

@ -132,7 +132,7 @@ GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX debugfs=off"
## ##
## https://www.kernel.org/doc/html/latest/dev-tools/kfence.html ## https://www.kernel.org/doc/html/latest/dev-tools/kfence.html
## ##
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX kfence.sample_interval=100" GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX kfence.sample_interval=100"
## Disable x86 Virtual Dynamic Shared Object (vDSO) mappings. ## Disable x86 Virtual Dynamic Shared Object (vDSO) mappings.
## ##