Re: [PATCH] net: randomize layout of struct net_device

From: Kees Cook
Date: Fri Jun 06 2025 - 15:46:30 EST




On June 6, 2025 8:42:45 AM PDT, Eric Dumazet <edumazet@xxxxxxxxxx> wrote:
>Most distros use CONFIG_RANDSTRUCT_NONE=y

That is true. But distros don't strictly define our code base. :)

> I do not think __randomize_layout has a future.

It will remain an actively supported feature -- many high security systems (that build their own kernels) use it, along with other features where they have no problem trading performance for security.

-Kees

--
Kees Cook