Kernel Hardening - security-misc

[Patrick]

page_table_check=on

Worth considering for default use if perf is acceptable. This feature guards against some memory corruption attacks. Due to the performance/memory costs of the proposed Page Table Check, it would be off by default. Activation would require building with the PAGE_TABLE_CHECK build option enabled plus booting the kernel with the page_table_check=on parameter to enable it at run-time.