aslr

enable kernel address space layout randomization

but only in the primary boot option - not in the rescue or backup boot options