mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-10-12 17:34:36 +00:00
ae1f2dd6af
Enable the STACKLEAK GCC plugin which erases the kernel stack before returning from system calls. This security options has a reported performance hit of around 1% which seem like a reasonable amount. For more details see: https://outflux.net/blog/archives/2018/12/24/security-things-in-linux-v4-20/ Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
See ../docs/kernels.md for more information on kernel builds.