From 0c5b1e9f577d52e2c056e786e32c14ff37db344b Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Sat, 23 Jul 2022 07:49:56 -0400 Subject: [PATCH] undo `"force kernel to panic on "oopses"` because implemented differently already https://forums.whonix.org/t/set-oops-panic-kernel-parameter-or-kernel-panic-on-oops-1-sysctl-for-better-security/7713 --- etc/default/grub.d/40_kernel_hardening.cfg | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/etc/default/grub.d/40_kernel_hardening.cfg b/etc/default/grub.d/40_kernel_hardening.cfg index a6dfb3e..5f8476e 100644 --- a/etc/default/grub.d/40_kernel_hardening.cfg +++ b/etc/default/grub.d/40_kernel_hardening.cfg @@ -55,4 +55,9 @@ GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX extra_latent_entropy" GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX debugfs=off" ## Force the kernel to panic on "oopses" (which may be due to false positives) -GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX oops=panic" +## https://forums.whonix.org/t/set-oops-panic-kernel-parameter-or-kernel-panic-on-oops-1-sysctl-for-better-security/7713 +## Implemented differently: +## /usr/libexec/security-misc/panic-on-oops +## /etc/X11/Xsession.d/50panic_on_oops +## /etc/sudoers.d/security-misc +#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX oops=panic"