Restrict access to debugfs

This commit is contained in:
madaidan 2020-09-28 19:21:20 +00:00
parent feb7cea4c5
commit 06ffd5d220
No known key found for this signature in database
GPG key ID: CF52E4DE909EC236
2 changed files with 8 additions and 0 deletions

3
debian/control vendored
View file

@ -126,6 +126,9 @@ Description: enhances misc security settings
* Restricts loading line disciplines to `CAP_SYS_MODULE`.
.
* Restricts the `userfaultfd()` syscall to root.
.
* Access to debugfs is restricted as it can contain a lot of sensitive
information.
.
Improve Entropy Collection
.