Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-30 15:04:17 -04:00
Code Issues Projects Releases Packages Wiki Activity

syntax fix

Browse source 
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX mds=full,nosmt"

https://forums.whonix.org/t/kernel-hardening/7296/70
This commit is contained in:
Patrick Schleizer 2019-06-23 18:46:52 +00:00
parent f1147318c0
commit 2a6289980e
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
1 changed files with 2 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
etc/default/grub.d/40_kernel_hardening.cfg
View file

@ -13,8 +13,6 @@ GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX mce=0"
# Enables Kernel Page Table Isolation which mitigates Meltdown and improves KASLR.
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX pti=on"
# Disables smt which can be used to exploit the MDS vulnerability.
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX nosmt"
# Enables all mitigations for the MDS vulnerability.
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX mds=full"
# Disables smt which can be used to exploit the MDS vulnerability.
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX mds=full,nosmt"