Component Type: kbuild config

Description: Randomize the kernel memory sections

More info: Randomizes the base virtual address of kernel memory sections (physical memory mapping, vmalloc & vmemmap). This security feature makes exploits relying on predictable memory locations less reliable. The order of allocations remains unchanged. Entropy is generated in the same way as RANDOMIZE_BASE. Current implementation in the optimal configuration have in average 30,000 different possible virtual addresses for each memory section. If unsure, say Y.

Build project: Kconfig (Linux kconfig) (Path: arch\x86\Kconfig )

Other views: file explorer