mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-07-30 08:38:35 -04:00
Enable panic_on_warn=1
This commit is contained in:
parent
9c918eb431
commit
3101035a3f
2 changed files with 9 additions and 8 deletions
|
@ -43,9 +43,10 @@ Kernel space:
|
|||
|
||||
- Restrict kernel profiling and the performance events system to `CAP_PERFMON`.
|
||||
|
||||
- Force the kernel to panic on "oopses" that can potentially indicate and thwart
|
||||
certain kernel exploitation attempts. Optional - Force immediate reboot on the
|
||||
occurrence of a kernel panic and also set panic limit to one (when using Linux kernel >= 6.2).
|
||||
- Force the kernel to panic on both "oopses", which can potentially indicate and thwart
|
||||
certain kernel exploitation attempts, and also kernel warnings in the `WARN()` path.
|
||||
Optional - Force immediate reboot on the occurrence of a single kernel panic and also
|
||||
(when using Linux kernel >= 6.2) limit the number of allowed panics to one.
|
||||
|
||||
- Disable the use of legacy TIOCSTI operations which can be used to inject keypresses.
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue