2024-05-10 23:18:36 -04:00
|
|
|
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
|
2023-10-22 09:36:03 -04:00
|
|
|
## See the file COPYING for copying conditions.
|
|
|
|
|
|
|
|
|
|
## https://www.kicksecure.com/wiki/Security-misc#Remount_Secure
|
|
|
|
|
|
2023-10-22 16:12:26 -04:00
|
|
|
## Disable Remount Secure.
|
2023-10-22 16:22:08 -04:00
|
|
|
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure=0"
|
2023-10-22 09:36:03 -04:00
|
|
|
|
2023-10-22 16:12:26 -04:00
|
|
|
## Re-mount with nodev, nosuid only.
|
2023-10-22 16:22:08 -04:00
|
|
|
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure=1"
|
2023-10-22 16:12:26 -04:00
|
|
|
|
|
|
|
|
## Re-mount with nodev, nosuid and most with noexec except for /home.
|
2023-10-22 16:22:08 -04:00
|
|
|
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure=2"
|
2023-10-22 16:12:26 -04:00
|
|
|
|
|
|
|
|
## Re-mount with nodev, nosuid and all with noexec including /home.
|
2023-10-22 16:22:08 -04:00
|
|
|
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure=3"
|
