Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-08-04 02:04:13 -04:00
Code Issues Projects Releases Packages Wiki Activity

Provide option to disable 32 bit vDSO mappings

Browse source
This commit is contained in:
Raja Grewal 2024-08-03 00:13:38 +10:00
parent 9099ecce8a
commit 52aeacb4da
No known key found for this signature in database
GPG key ID: 92CA473C156B64C4
2 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
etc/default/grub.d/40_kernel_hardening.cfg
View file

@ -122,6 +122,14 @@ GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX debugfs=off"
##
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX kfence.sample_interval=100"
## Disable x86 Virtual Dynamic Shared Object (vDSO) mappings.
##
## https://en.wikipedia.org/wiki/VDSO
##
## The use of 32 bit vDSO mappings is currently enabled.
##
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX vdso32=0"
## Switch (back) to using kCFI as the default Control Flow Integrity (CFI) implementation.
## The default implementation is FIneIBT as of Linux kernel 6.2.
## The Intel-developed IBT (Indirect Branch Tracking) is only used if supported by the CPU.