description

This commit is contained in:
Patrick Schleizer 2019-09-06 11:46:22 +00:00
parent fccfacfdaf
commit 5960c1682a
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48

3
debian/control vendored
View file

@ -28,8 +28,7 @@ Description: enhances misc security settings
* Kernel symbols in /proc/kallsyms are hidden to prevent malware from * Kernel symbols in /proc/kallsyms are hidden to prevent malware from
reading them and using them to learn more about what to attack on your system. reading them and using them to learn more about what to attack on your system.
. .
* Kexec is disabled as it can be used for live patching of the running * Kexec is disabled as it can be used to load a malicious kernel.
kernel.
/etc/sysctl.d/kexec.conf /etc/sysctl.d/kexec.conf
. .
* ASLR effectiveness for mmap is increased. * ASLR effectiveness for mmap is increased.