Enable panic_on_warn=1

This commit is contained in:
Raja Grewal 2024-08-29 01:57:32 +10:00
parent 9c918eb431
commit 3101035a3f
No known key found for this signature in database
GPG key ID: 92CA473C156B64C4
2 changed files with 9 additions and 8 deletions

View file

@ -43,9 +43,10 @@ Kernel space:
- Restrict kernel profiling and the performance events system to `CAP_PERFMON`.
- Force the kernel to panic on "oopses" that can potentially indicate and thwart
certain kernel exploitation attempts. Optional - Force immediate reboot on the
occurrence of a kernel panic and also set panic limit to one (when using Linux kernel >= 6.2).
- Force the kernel to panic on both "oopses", which can potentially indicate and thwart
certain kernel exploitation attempts, and also kernel warnings in the `WARN()` path.
Optional - Force immediate reboot on the occurrence of a single kernel panic and also
(when using Linux kernel >= 6.2) limit the number of allowed panics to one.
- Disable the use of legacy TIOCSTI operations which can be used to inject keypresses.