From: Josh Poimboeuf on
gitlab.com
Merge Request:
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/961
Improve Fedora and ARK kernel hardening by enabling the following
configs:
CONFIG_GCC_PLUGIN_STACKLEAK
CONFIG_SCHED_STACK_END_CHECK
CONFIG_BUG_ON_DATA_CORRUPTION
CONFIG_SLAB_FREELIST_HARDENED (already enabled in Fedora)
CONFIG_PAGE_POISONING
These were tested by the RHEL performance engineering team. No
measurable performance impact was detected.