1.Penguin Landscape

The hardening updates for the Linux 6.7 kernel bring a new hardening configuration profile to help build a security-hardened kernel with some sane defaults.

As part of the hardening updates merged this week for Linux 6.7, there is now a Kconfig fragment with some basic hardening options that get enabled. Running make hardening.config can be used for applying the hardening options that are recommended.

These hardening options for the Linux kernel build amount to "a basic set of kernel hardening options that have the least (or no) performance impact and remove a reasonable set of legacy APIs."