CONFIG_RANDSTRUCT_FULL: Fully randomize structure layout

General informations

The Linux kernel configuration item CONFIG_RANDSTRUCT_FULL:

• prompt: Fully randomize structure layout
• type: bool
• depends on: CONFIG_CC_HAS_RANDSTRUCT || CONFIG_GCC_PLUGINS
• defined in security/Kconfig.hardening
• found in Linux kernels: 5.19, 6.0–6.8, 6.9-rc+HEAD

Help text

Fully randomize the member layout of sensitive structures as much as possible, which may have both a memory size and performance impact.

One difference between the Clang and GCC plugin implementations is the handling of bitfields. The GCC plugin treats them as fully separate variables, introducing sometimes significant padding. Clang tries to keep adjacent bitfields together, but with their bit ordering randomized.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: