Elektrine lite

← Feed

Peter

pietinger@infosec.exchange

Posts

  • View post

    @thesamesam @kees Thanks a lot! I have already updated my wiki article: https://wiki.gentoo.org/wiki/User:Pietinger/Tutorials/Kernel_Hardening_with_KSPP#KSPP_2024-04-26 TBH I could not find this option in kernel 6.8: CONFIG_UNWIND_PATCH_PAC_INTO_SCS=y (Maybe it is in 6.9?)

  • View post

    @thesamesam @kees I see. Thank you very much again! :-)

  • View post

    @kees With 6.9 we got a new CONFIG_UBSAN_SIGNED_WRAP, but in (new) hardening.config of 6.10-rc1 it is not enabled. Is it not recommended?

  • View post

    @kees Thank you!

  • View post

    @kees Hmm ... an announcement (about a change) from you on fosstodon could help (and would be great) ... ;-)

  • View post

    @kees I am sorry - my mistake. :-( I meant that an update to github could be accompanied by a short info here. :-)

  • View post

    @kees You surely know that in kernel version 7.2 option CONFIG_RANDOM_KMALLOC_CACHES was renamed (and split) into CONFIG_KMALLOC_PARTITION_CACHES and CONFIG_KMALLOC_PARTITION_RANDOM. Are you going to update your brilliant @KSPP page?