This commit is contained in:
Patrick Schleizer 2019-09-06 11:47:17 +00:00
parent 5960c1682a
commit 51705c201b
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48

View file

@ -11,8 +11,8 @@ the kernel. (!) Hence, this package disables this feature by shipping the
* Kernel symbols in /proc/kallsyms are hidden to prevent malware from * Kernel symbols in /proc/kallsyms are hidden to prevent malware from
reading them and using them to learn more about what to attack on your system. reading them and using them to learn more about what to attack on your system.
* Kexec is disabled as it can be used for live patching of the running * Kexec is disabled as it can be used to load a malicious kernel.
kernel. /etc/sysctl.d/kexec.conf
* ASLR effectiveness for mmap is increased. * ASLR effectiveness for mmap is increased.