diff --git a/etc/sysctl.d/kptr_restrict.conf b/etc/sysctl.d/kptr_restrict.conf index a363063..0ea871e 100644 --- a/etc/sysctl.d/kptr_restrict.conf +++ b/etc/sysctl.d/kptr_restrict.conf @@ -1,5 +1,8 @@ ## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP ## See the file COPYING for copying conditions. -## Hides kernel symbols in /proc/kallsyms +## Hides kernel addresses in various files in /proc. +## Kernel addresses can be very useful in certain exploits. +## +## https://kernsec.org/wiki/index.php/Bug_Classes/Kernel_pointer_leak kernel.kptr_restrict=2