[$] Finer-grained kernel address-space layout randomization
The idea behind kernel address-space layoutrandomization (KASLR) is to make it harder for attackers to find codeand dataof interest to use in their attacks by loading the kernel at a randomlocation. But a single random offset is used for the placement of thekernel text, which presents a weakness: if the offset can be determined foranything within the kernel, the addresses of other parts of the kernel are readilycalculable. A new "finer-grained" KASLR patch set seeks to remedy thatweakness for the text section of the kernel by randomly reordering thefunctions within the kernel code at boot time.