This commit is contained in:
raja-grewal 2025-08-15 11:29:27 +10:00 committed by GitHub
parent 1f7525722e
commit 00c660d40d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -221,8 +221,8 @@ Kernel space:
- Disable 32-bit vDSO mappings as they are a legacy compatibility feature.
- Use kCFI as the default CFI implementation as it is more resilient to attacks that able
to write arbitrary executables into memory omitting the necessary hash validation.
- Use kCFI as the default CFI implementation as it is more resilient to attacks that are
able to write arbitrary executables into memory omitting the necessary hash validation.
- Optional - Disable support for all x86 processes and syscalls (when using Linux kernel >= 6.7)
to reduce attack surface.