description

This commit is contained in:
Patrick Schleizer 2019-09-05 02:31:57 -04:00
parent 0b3dcef13d
commit 0e20e33d16
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

1
debian/control vendored
View File

@ -55,6 +55,7 @@ Description: enhances misc security settings
* All mitigations for the MDS vulnerability are enabled.
.
* The SysRq key is restricted to only allow shutdowns/reboots.
/etc/sysctl.d/sysrq.conf
.
* A systemd service clears System.map on boot as these contain kernel symbols
that could be useful to an attacker.