From d7323bacbadbb43b0a3b79d59390db27d8c059db Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Mon, 1 Aug 2022 01:47:22 -0400
Subject: [PATCH] set lockdown to confidentiality mode

---
 grub | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/grub b/grub
index 5c12d23..a5f30ac 100644
--- a/grub
+++ b/grub
@@ -4,7 +4,7 @@ GRUB_DEFAULT=0
 GRUB_TIMEOUT=0
 GRUB_DISTRIBUTOR="Arch"
 GRUB_CMDLINE_LINUX_DEFAULT="loglevel=3 quiet"
-GRUB_CMDLINE_LINUX="vsyscall=none console=ttyS0 "
+GRUB_CMDLINE_LINUX="lockdown=confidentiality vsyscall=none console=ttyS0 "
 
 # Preload both GPT and MBR modules so that they are not missed
 GRUB_PRELOAD_MODULES="part_gpt part_msdos"