Practical guide on out of tree mitigations on Linux
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A practical guide explains how to add out-of-tree security mitigations to Linux services, written by a blogger responding to a reader question. It covers hardened allocators (hardened_malloc, mimalloc secure mode, Scudo), with a demo showing a heap overflow caught only under hardened allocators.