DEP isn't relevant. If you're compiling your own kernel this is a completely viable security technique. Where it fails is in distros. AFAIK most linux distros

DEP isn't relevant. If you're compiling your own kernel this is a completely viable security technique. Where it fails is in distros. AFAIK most linux distros do something similar (based on Grsecurity patches) but it's useless because... they then distribute the binary, with everything necessary to get addresses. But if you're distributing it internally/ it's a secret, yeah, you're going to benefit from that.