I thought vsyscalls were obsolete, but leaving them, enabled doesn't really impact security too much. Regarding performance, `page_alloc.shuffle=1` can increase performance, and `slab_nomerge init_on_alloc=1 init_on_free=1 pti=on randomize_kstack_offset=on` do not have a very noticeable performance impact, it will almost never be noticed in real use cases unless you specifically look for it. _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
