This commit is contained in:
Patrick Schleizer 2020-01-15 11:35:41 -05:00
parent 0618b53464
commit 0f17596aac
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -100,7 +100,7 @@ a target for ROP.
and has been the cause of multiple vulnerabilities.
* An initramfs hook sets the sysctl values in /etc/sysctl.d before init
is executed so our hardening is enabled as early as possible.
is executed so sysctl hardening is enabled as early as possible.
* The kernel panics on oopses to prevent it from continuing to run a flawed
process and to deter brute forcing.