Get the latest tech news
Linux 6.10's Hardening Configuration Now Enables KCFI & Other Features
Introduced last year with the Linux 6.7 kernel was a hardening configuration to allow for 'make hardening.config' as an easy way of building a security-hardened Linux kernel with sane defaults
Most notably, the Linux 6.10 hardening configuration now enables the Clang Kernel Control Flow Integrity (KCFI) protections. CONFIG_X86_KERNEL_IBT is also enabled for the Control-flow Enforcement Technology (CET) Indirect Branch Tracking (IBT) functionality when running on newer processors. About The AuthorMichael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience.
Or read this on Phoronix