security-misc/etc/default/grub.d/40_remmount-secure.cfg

## Copyright (C) 2023 - 2023 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.

## https://www.kicksecure.com/wiki/Security-misc#Remount_Secure

## Disable Remount Secure.
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure=0"

## Re-mount with nodev, nosuid only.
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure=1"

## Re-mount with nodev, nosuid and most with noexec except for /home.
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure=2"

## Re-mount with nodev, nosuid and all with noexec including /home.
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure=3"