nixpkgs/pkgs/os-specific
Andrew Marshall 00a45bc41b linux: Enable SLAB_FREELIST_HARDENED, SLAB_FREELIST_RANDOM
Enabled in [Arch][1], [Debian][2], [Fedora][3]; no others checked.
Recommended by [Kernel Self Protection Project][4]. This should also
implicitly enable SHUFFLE_PAGE_ALLOCATOR.

Performance impact per upstream:

For _HARDENED:
> The difference gets lost in the noise, but if the above is to be taken
> literally, using CONFIG_FREELIST_HARDENED is 0.07% slower.

For _RANDOM:
> Performance results highlighted no major changes

[1]: 66d72ee54a/trunk/config (L1037-L1038)
[2]: 07731f5956/debian/config/config (L6742-6743)
[3]: 6d6ad72f0c/f/kernel-x86_64-fedora.config (_6079)
[4]: https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
2022-08-27 15:05:35 -04:00
..
bsd
darwin Merge master into staging-next 2022-08-17 18:01:22 +00:00
linux linux: Enable SLAB_FREELIST_HARDENED, SLAB_FREELIST_RANDOM 2022-08-27 15:05:35 -04:00
solo5 solo5: fix paths detection in compiler and linker wrappers. 2022-08-13 07:45:54 -05:00
windows windows.mingw_w64: enable stripping 2022-07-28 21:55:15 +01:00