https://www.openwall.com/lists/kernel-hardening/2018/07/18/1 has some useful defconfigs making use of well-known existing hardening features/options which we could easily deploy in kernel testing.
These could be potentially added under a 'hardened' USE flag with reference to the upstream inspirations in ewarn/einfo messages.
https://www.openwall.com/lists/kernel-hardening/2018/07/18/1 has some useful defconfigs making use of well-known existing hardening features/options which we could easily deploy in kernel testing.
These could be potentially added under a 'hardened' USE flag with reference to the upstream inspirations in ewarn/einfo messages.