Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-23 12:29:50 -05:00
Code Issues Packages Projects Releases Wiki Activity

spelling

Browse Source
This commit is contained in:
Patrick Schleizer 2024-07-17 10:55:12 -04:00
parent 5cec685cf9
commit 24cd70a014
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
2 changed files with 12 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
usr/lib/sysctl.d/30_security-misc_kexec-disable.conf
View File

@ -2,15 +2,16 @@
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## NOTE: ## NOTE:
## Why is this in a dedicated config file? ## This configuration is in a dedicated file because the ram-wipe package
## Package ram-wipe requires kexec. However, ram-wipe could not ship a config ## requires kexec. However, ram-wipe cannot ship a config file
## file /etc/sysctl.d/40_ram-wipe.conf which sets 'kernel.kexec_load_disabled=0'. ## /etc/sysctl.d/40_ram-wipe.conf that sets 'kernel.kexec_load_disabled=0'.
## This is because once systemd-sysctl.service has set 'kernel.kexec_load_disabled=1' ## Once systemd-sysctl.service has set 'kernel.kexec_load_disabled=1',
## it cannot be undone without reboot. This is a upstream Linux security feature. ## it cannot be undone without a reboot. This is an upstream Linux security feature.
## Disables kexec which can be used to replace the running kernel. ## Disables kexec, which can be used to replace the running kernel.
## Useful for live kernel patching without rebooting. ## Kexec is useful for live kernel patching without rebooting.
## ##
## For more information, see:
## https://en.wikipedia.org/wiki/Kexec ## https://en.wikipedia.org/wiki/Kexec
## ##
kernel.kexec_load_disabled=1 kernel.kexec_load_disabled=1

7
usr/lib/sysctl.d/30_silent-kernel-printk.conf
View File

@ -5,10 +5,11 @@
## Must be used in combination with the kernel boot parameters. ## Must be used in combination with the kernel boot parameters.
## See /etc/default/grub.d/41_quiet_boot.cfg for implementation. ## See /etc/default/grub.d/41_quiet_boot.cfg for implementation.
## ##
## For more information, refer to:
## https://www.kernel.org/doc/html/latest/core-api/printk-basics.html ## https://www.kernel.org/doc/html/latest/core-api/printk-basics.html
## ##
kernel.printk=3 3 3 3 kernel.printk=3 3 3 3
## For Increased Log Verbosity: ## For increased log verbosity:
## Adjust (or comment out) the kernel parameters in /etc/default/grub.d/41_quiet_boot.cfg. ## A) Adjust (or comment out) the kernel parameters in /etc/default/grub.d/41_quiet_boot.cfg. Or,
## Alternatively, installing the debug-misc package will undo these settings. ## B) Alternatively, install the debug-misc package to undo these settings.