Skip to content

redhat/configs: Enable CONFIG_INIT_STACK_ALL_ZERO for RHEL

Josh Poimboeuf requested to merge jpoimboe/kernel-ark:CONFIG_INIT_STACK_ALL_ZERO into os-build

CONFIG_INIT_STACK_ALL_ZERO is a hardening feature which is "intended to eliminate all classes of uninitialized stack variable exploits and information exposures."

Recent internal benchmark testing has shown negligible performance impact.

It's already enabled for Fedora. Enable it for RHEL.

Signed-off-by: Josh Poimboeuf jpoimboe@redhat.com

Merge request reports