KASLR + SMEP/SMAP: Measuring Real Attack Surface Reduction
In this field, we love to treat kernel flags like they’re some kind of magic shield. Flip on CONFIG_RANDOMIZE_BASE=y for KASLR, tick the box, and suddenly the system’s “hardened.” Turn on SMEP and SMAP in the BIOS, and security closes out the ticket. Job done, right? But if I stopped you and asked, “Which actual…