Messages in this thread | | | Date | Mon, 12 Feb 2024 15:07:24 +0100 | Subject | Re: [PATCH] hardening: Enable KFENCE in the hardening config | From | Matthieu Baerts <> |
| |
Hi Marco,
On 12/02/2024 14:01, Marco Elver wrote: > KFENCE is not a security mitigation mechanism (due to sampling), but has > the performance characteristics of unintrusive hardening techniques. > When used at scale, however, it improves overall security by allowing > kernel developers to detect heap memory-safety bugs cheaply.
Thank you for having sent this patch!
Cheers, Matt -- Sponsored by the NGI0 Core fund.
| |