Quote from https://capsule8.com/blog/kernel-configuration-glossary/: > Significance. Medium > > SLUB has extensive debug support features. Disabling these can result in > significant savings in code size. This also disables SLUB sysfs support. > /sys/slab will not exist and there will be no support for cache validation etc. This is currently disabled on aarch64 and armv5tel, I doubt we need this somewhere else.
Is this kind of thing supposed to be turned off or on then?
KSSP says "yes": https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
https://patchwork.ipfire.org/patch/3178/
https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=4ee87ee248256a19800f42fde0c54d46895646d2
https://blog.ipfire.org/post/ipfire-2-25-core-update-146-is-available-for-testing
https://blog.ipfire.org/post/ipfire-2-25-core-update-146-released