kernel: Activate CONFIG_SLAB_FREELIST_RANDOM

This activates CONFIG_SLAB_FREELIST_RANDOM.
This option make the free list less predictable. This makes it harder to
exploit heap based security vulnerabilities.

This adds a little bit more code to the kernel and a small additional
compute overhead.

This option is activated in Debian by default.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

diff --git a/target/linux/generic/config-5.10 b/target/linux/generic/config-5.10
index 9645072a558cc12cac3091a110b47a423e8c8053..49325971f611bc7462d38869cd32d56a2dfbb8c7 100644 (file)
--- a/target/linux/generic/config-5.10
+++ b/target/linux/generic/config-5.10
@@ -5464,7 +5464,7 @@ CONFIG_SIGNALFD=y
 # CONFIG_SLAB is not set
 CONFIG_SLABINFO=y
 CONFIG_SLAB_FREELIST_HARDENED=y
-# CONFIG_SLAB_FREELIST_RANDOM is not set
+CONFIG_SLAB_FREELIST_RANDOM=y
 CONFIG_SLAB_MERGE_DEFAULT=y
 # CONFIG_SLHC is not set
 # CONFIG_SLICOSS is not set

diff --git a/target/linux/generic/config-5.15 b/target/linux/generic/config-5.15
index 3d5a8606734b975daa33d058cf3cfe753c6c90f3..c6af24ec661e809f35deaf597933f78364f8b848 100644 (file)
--- a/target/linux/generic/config-5.15
+++ b/target/linux/generic/config-5.15
@@ -5754,7 +5754,7 @@ CONFIG_SIGNALFD=y
 # CONFIG_SLAB is not set
 CONFIG_SLABINFO=y
 CONFIG_SLAB_FREELIST_HARDENED=y
-# CONFIG_SLAB_FREELIST_RANDOM is not set
+CONFIG_SLAB_FREELIST_RANDOM=y
 CONFIG_SLAB_MERGE_DEFAULT=y
 # CONFIG_SLHC is not set
 # CONFIG_SLICOSS is not set