This commit is contained in:
Patrick Schleizer 2020-01-30 01:22:06 -05:00
parent c1a0da60be
commit 4df0d6c01c
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -53,6 +53,8 @@ vulnerabilities.
* All mitigations for the MDS vulnerability are enabled.
* Enables mitigations for the L1TF (L1 Terminal Fault) vulnerability.
* A systemd service clears System.map on boot as these contain kernel symbols
that could be useful to an attacker.
/etc/kernel/postinst.d/30_remove-system-map