(In reply to Jiri Slaby from comment #1) > Guys, do you have any opinion (performance- or function-wise) on enabling > CONFIG_HARDENED_USERCOPY and CONFIG_SLAB_FREELIST_HARDENED in our kernels, > starting perhaps with Tumbleweed? I've no opinion yet. Tests are queued to compare a baseline 5.0 kernel with the openSUSE LEAP 15.0 kernel config versus one set with these options on three machines. It'll take a few days for the test grid to pick them up and run.