Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-12-17 18:03:53 -05:00
Code Issues Projects Releases Packages Wiki Activity

Minor fixes to NMI panic docs

Browse source
This commit is contained in:
Aaron Rainbolt 2025-11-28 00:13:45 -06:00
parent 37b1d055f1
commit 65c45fc3d7
No known key found for this signature in database
GPG key ID: A709160D73C79109
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -57,8 +57,8 @@ configuration file and significant hardening is applied to a myriad of component
running out of memory. running out of memory.
- Optional - Force immediate kernel panics upon receiving NMIs (Non-Maskable Interrupts) - Optional - Force immediate kernel panics upon receiving NMIs (Non-Maskable Interrupts)
indicating serious hardware-level I/O issues, uncorrectable memory and hardware errors, triggered by serious hardware-level I/O issues, uncorrectable memory and hardware errors,
and undefined or unknowsources in order to prevent data corruption. and undefined or unknown sources in order to prevent data corruption.
- Disable the use of legacy TIOCSTI operations which can be used to inject keypresses. - Disable the use of legacy TIOCSTI operations which can be used to inject keypresses.

4
usr/lib/sysctl.d/990-security-misc.conf#security-misc-shared
View file

@ -219,8 +219,8 @@ kernel.perf_event_paranoid=3
## These are valuable for high-reliability systems where data integrity is critical. ## These are valuable for high-reliability systems where data integrity is critical.
## ##
## https://en.wikipedia.org/wiki/Non-maskable_interrupt ## https://en.wikipedia.org/wiki/Non-maskable_interrupt
## https://www.kernel.org/doc/html/latest//trace/events-nmi.html ## https://www.kernel.org/doc/html/latest/trace/events-nmi.html
## https://0xax.gitbooks.io/linux-insides/content/Interrupts/linux-interrupts-6.html ## https://0xax.gitbook.io/linux-insides/summary/interrupts/linux-interrupts-6
## https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_for_real_time/7/html/reference_guide/non-maskable_interrupts ## https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_for_real_time/7/html/reference_guide/non-maskable_interrupts
## ##
## Note that these must be used with kernel.panic=-1 for them to function as intended. ## Note that these must be used with kernel.panic=-1 for them to function as intended.