|
@@ -687,7 +687,7 @@ config PID_NS
|
|
depends on NAMESPACES && EXPERIMENTAL
|
|
depends on NAMESPACES && EXPERIMENTAL
|
|
help
|
|
help
|
|
Support process id namespaces. This allows having multiple
|
|
Support process id namespaces. This allows having multiple
|
|
- process with the same pid as long as they are in different
|
|
|
|
|
|
+ processes with the same pid as long as they are in different
|
|
pid namespaces. This is a building block of containers.
|
|
pid namespaces. This is a building block of containers.
|
|
|
|
|
|
Unless you want to work with an experimental feature
|
|
Unless you want to work with an experimental feature
|
|
@@ -952,7 +952,7 @@ config COMPAT_BRK
|
|
Randomizing heap placement makes heap exploits harder, but it
|
|
Randomizing heap placement makes heap exploits harder, but it
|
|
also breaks ancient binaries (including anything libc5 based).
|
|
also breaks ancient binaries (including anything libc5 based).
|
|
This option changes the bootup default to heap randomization
|
|
This option changes the bootup default to heap randomization
|
|
- disabled, and can be overriden runtime by setting
|
|
|
|
|
|
+ disabled, and can be overridden at runtime by setting
|
|
/proc/sys/kernel/randomize_va_space to 2.
|
|
/proc/sys/kernel/randomize_va_space to 2.
|
|
|
|
|
|
On non-ancient distros (post-2000 ones) N is usually a safe choice.
|
|
On non-ancient distros (post-2000 ones) N is usually a safe choice.
|
|
@@ -1110,7 +1110,7 @@ config INIT_ALL_POSSIBLE
|
|
cpu_possible_map, some of them chose to initialize cpu_possible_map
|
|
cpu_possible_map, some of them chose to initialize cpu_possible_map
|
|
with all 1s, and others with all 0s. When they were centralised,
|
|
with all 1s, and others with all 0s. When they were centralised,
|
|
it was better to provide this option than to break all the archs
|
|
it was better to provide this option than to break all the archs
|
|
- and have several arch maintainers persuing me down dark alleys.
|
|
|
|
|
|
+ and have several arch maintainers pursuing me down dark alleys.
|
|
|
|
|
|
config STOP_MACHINE
|
|
config STOP_MACHINE
|
|
bool
|
|
bool
|