
The new change proposal includes enabling the kernel.kptr_restrict, kernel.yama.ptrace_scope, and net.core.bpf_jit_harden knobs by default.
The kernel.kptr_restrict sysctl option restricts kernel pointers from being exposed to unprivileged users so it's harder for attackers to determine the kernel memory layout. By default the kptr_restrict behavior is just for hashing kernel addresses before







