Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-05 14:44:59 -04:00
Code Issues Projects Releases Packages Wiki Activity

Add KSPP notice definitions

Browse source
This commit is contained in:
Raja Grewal 2024-08-26 11:34:12 +10:00
parent 2841d789be
commit 2c356e8b0e
No known key found for this signature in database
GPG key ID: 92CA473C156B64C4
8 changed files with 32 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
usr/lib/sysctl.d/30_security-misc_kexec-disable.conf
View file

@ -1,6 +1,10 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## Definitions:
## KSPP=yes: compliant with recommendations by the KSPP
## KSPP=partial: partially compliant with recommendations by the KSPP
## NOTE:
## This configuration is in a dedicated file because the ram-wipe package
## requires kexec. However, ram-wipe cannot ship a config file

4
usr/lib/sysctl.d/30_silent-kernel-printk.conf
View file

@ -1,6 +1,10 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## Definitions:
## KSPP=yes: compliant with recommendations by the KSPP
## KSPP=partial: partially compliant with recommendations by the KSPP
## Prevent kernel information leaks in the console during boot.
## Must be used in conjunction with kernel boot parameters.
## See /etc/default/grub.d/41_quiet_boot.cfg for implementation.

4
usr/lib/sysctl.d/990-security-misc.conf
View file

@ -6,6 +6,10 @@
## is parsed first, followed by /usr/lib/sysctl.d/990-security-misc.conf.
## https://github.com/Kicksecure/security-misc/pull/135
## Definitions:
## KSPP=yes: compliant with recommendations by the KSPP
## KSPP=partial: partially compliant with recommendations by the KSPP
## This configuration file is divided into 5 sections:
## 1. Kernel Space
## 2. User Space