Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-02 16:34:45 -05:00
Code Issues Packages Projects Releases Wiki Activity

disable lockdown for now due to module loading

Browse Source
This commit is contained in:
Patrick Schleizer 2019-12-23 03:41:54 -05:00
parent 9ec5b0ee82
commit 26fe9394ff
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
etc/default/grub.d/40_kernel_hardening.cfg
View File

@ -45,6 +45,10 @@ if dpkg --compare-versions "${kver}" ge "5.2"; then
fi fi
## Enables kernel lockdown. ## Enables kernel lockdown.
if dpkg --compare-versions "${kver}" ge "5.4"; then ##
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX lockdown=confidentiality" ## Disabled for now as it enforces module signature verification which breaks
fi ## too many things.
##
#if dpkg --compare-versions "${kver}" ge "5.4"; then
# GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX lockdown=confidentiality"
#fi