Follow up to my previous note It looks fairly straightforward to identify which applications need to remain on level 2 by checking binaries for those using the malloc_usable_size() call. e.g. $ nm -uD /usr/lib/systemd/systemd-networkd |grep malloc_usable U malloc_usable_size@GLIBC_2.2.5 gene