Re: Fedora 37: Add kernel parameters that help prevent local exploits

[Glorious Hellosway via devel]

For `slab_nomerge`, it can lead to very slight increase of kernel memory. 
`init_on_alloc=1` has a almost no performance impact, it is under 1% and is 
usually within standard error, but there is bug with zfs that can make zfs 
slower. `init_on_free=1` can be measured and is around 7-20% under certain 
workloads, but in some workloads it does not impact performance. 
`randomize_kstack_offset=on` can sometimes increase performance by 1%, or 
decrease it by 1%, but Redis has been noticed to have performance reduced by 
2%. `pti=on` mitigates meltdown, but has a very big performance impact.
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure