This commit is contained in:
raja-grewal 2025-08-15 11:29:27 +10:00 committed by GitHub
parent 1f7525722e
commit 00c660d40d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -221,8 +221,8 @@ Kernel space:
- Disable 32-bit vDSO mappings as they are a legacy compatibility feature. - Disable 32-bit vDSO mappings as they are a legacy compatibility feature.
- Use kCFI as the default CFI implementation as it is more resilient to attacks that able - Use kCFI as the default CFI implementation as it is more resilient to attacks that are
to write arbitrary executables into memory omitting the necessary hash validation. able to write arbitrary executables into memory omitting the necessary hash validation.
- Optional - Disable support for all x86 processes and syscalls (when using Linux kernel >= 6.7) - Optional - Disable support for all x86 processes and syscalls (when using Linux kernel >= 6.7)
to reduce attack surface. to reduce attack surface.