Update control

This commit is contained in:
madaidan 2020-01-15 20:30:17 +00:00 committed by GitHub
parent f7fde60b67
commit 1df48a226d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

5
debian/control vendored
View File

@ -117,8 +117,9 @@ Description: enhances misc security settings
* The vivid kernel module is blacklisted as it's only required for testing
and has been the cause of multiple vulnerabilities.
.
* An initramfs hook sets the sysctl values in /etc/sysctl.d before init
is executed so sysctl hardening is enabled as early as possible.
* An initramfs hook sets the sysctl values in /etc/sysctl.conf and
/etc/sysctl.d before init is executed so sysctl hardening is enabled
as early as possible.
.
* The kernel panics on oopses to prevent it from continuing to run a flawed
process and to deter brute forcing.