If they're already running a custom Linux kernel build, why did they have AF_ALG enabled? Seems the perfect situation to limit features to only those actually being used.
In the article they explain that some of their services use it.
In the article they explain that some of their services use it.