Enable slab_debug=FZ

This commit is contained in:
Raja Grewal 2024-08-05 14:27:17 +10:00
parent fa9091869d
commit aa34d86598
No known key found for this signature in database
GPG key ID: 92CA473C156B64C4
2 changed files with 3 additions and 5 deletions

View file

@ -121,8 +121,8 @@ configuration file.
- Disable merging of slabs with similar size, which reduces the risk of
triggering heap overflows and limits influencing slab cache layout.
- Provide the option to enable sanity checks and red zoning via slab debugging.
Enabling this feature will implicitly disable kernel pointer hashing.
- Enable sanity checks and red zoning via slab debugging. This will implicitly
disable kernel pointer hashing, leaking very sensitive information to root.
- Enable memory zeroing at both allocation and free time, which mitigates some
use-after-free vulnerabilities by erasing sensitive information in memory.