description

This commit is contained in:
Patrick Schleizer 2019-09-06 11:46:22 +00:00
parent fccfacfdaf
commit 5960c1682a
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

3
debian/control vendored
View File

@ -28,8 +28,7 @@ Description: enhances misc security settings
* Kernel symbols in /proc/kallsyms are hidden to prevent malware from
reading them and using them to learn more about what to attack on your system.
.
* Kexec is disabled as it can be used for live patching of the running
kernel.
* Kexec is disabled as it can be used to load a malicious kernel.
/etc/sysctl.d/kexec.conf
.
* ASLR effectiveness for mmap is increased.