Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-02 10:14:56 -05:00
Code Issues Packages Projects Releases Wiki Activity

comments

Browse Source
This commit is contained in:
Patrick Schleizer 2022-07-05 10:44:28 -04:00
parent c20d588d78
commit 435c689cf9
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/default/grub.d/40_cold_boot_attack_defense.cfg
View File

@ -1,7 +1,7 @@
## Copyright (C) 2022 - 2022 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> ## Copyright (C) 2022 - 2022 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## RAM wipe is enabled by default on real hardware / bare metal. ## RAM wipe is enabled by default on host operating systems, real hardware.
## RAM wipe is disabled by in virtual machines (VMs). ## RAM wipe is disabled by in virtual machines (VMs).
## ##
## User documentation: ## User documentation:
@ -14,6 +14,8 @@
## unclear if that could actually lead to the host operating system using ## unclear if that could actually lead to the host operating system using
## swap. Through use of kernel parameter wiperam=force it is possible to ## swap. Through use of kernel parameter wiperam=force it is possible to
## force RAM wipe inside VMs which is useful for testing, development purposes. ## force RAM wipe inside VMs which is useful for testing, development purposes.
## There is no additional security benefit by the wiperam=force setting
## for host operating systems.
#GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT wiperam=force" #GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT wiperam=force"
## Kernel parameter wiperam=skip is provided to support disabling RAM wipe ## Kernel parameter wiperam=skip is provided to support disabling RAM wipe