Note that the DEBUG_SET_MODULE_RONX config option only depends on CONFIG_MODULES being set, not on CONFIG_KERNEL_DEBUG, unlike in bug 1760643. So the Ubuntu Security Team would like to see DEBUG_SET_MODULE_RONX enabled in the 4.4 linux-kvm kernel config. The renamed config STRICT_MODULE_RWX is set for the 4.15 based linux-kvm kernel in bionic.
Note that the DEBUG_SET_ MODULE_ RONX config option only depends on CONFIG_MODULES being set, not on CONFIG_ KERNEL_ DEBUG, unlike in bug 1760643. So the Ubuntu Security Team would like to see DEBUG_SET_ MODULE_ RONX enabled in the 4.4 linux-kvm kernel config. The renamed config STRICT_MODULE_RWX is set for the 4.15 based linux-kvm kernel in bionic.
Thanks.