3 ms·
Or just enabling the default kernel hardening flags. But sure, let's dunk on people for not running hardware that has been in developer-only release for less t
by stonogo 5y ago
Or just enabling the default kernel hardening flags. But sure, let's dunk on people for not running hardware that has been in developer-only release for less than a month.
- pjmlp 5y agoI agree with the kernel hardening flags, unfortunately it seems Android (not being a proper GNU/Linux) is the one doing the best at kernel hardening out of the box.
- stargrazer 5y agoFor the record, would you mind supplying a reference to those flags?
- stonogo 5y agoThe relevant flag is listed in the CVE report this whole discussion is about. CONFIG_FORTIFY_SRC=y turns the stack overflow into a panic, preventing the out-of-bounds write attack. You're probably just better off not loading the TIPC module, though, so that you don't have a crash condition either.