security-misc/etc/default/grub.d/40_enable_iommu.cfg

13 lines
567 B
INI
Raw Normal View History

2021-03-17 09:45:21 -04:00
## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
2019-11-05 09:55:43 -05:00
## See the file COPYING for copying conditions.
## Enables IOMMU to prevent DMA attacks.
2019-06-23 14:38:50 -04:00
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX intel_iommu=on amd_iommu=on"
2020-02-14 13:52:01 -05:00
## Disable the busmaster bit on all PCI bridges during very
## early boot to avoid holes in IOMMU.
##
## https://mjg59.dreamwidth.org/54433.html
## https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4444f8541dad16fefd9b8807ad1451e806ef1d94
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX efi=disable_early_pci_dma"