mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-11-27 02:18:04 -05:00
Merge pull request #250 from raja-grewal/Panik-Kalm
Add details on "oopes" and kernel panics
This commit is contained in:
commit
886f6095db
3 changed files with 17 additions and 0 deletions
|
|
@ -41,6 +41,10 @@ space, user space, core dumps, and swap space.
|
|||
|
||||
- Restrict kernel profiling and the performance events system to `CAP_PERFMON`.
|
||||
|
||||
- Force the kernel to panic on "oopses" that can potentially indicate and thwart
|
||||
certain kernel exploitation attempts. Provide the option to reboot immediately
|
||||
on a kernel panic.
|
||||
|
||||
- Randomize the addresses (ASLR) for mmap base, stack, VDSO pages, and heap.
|
||||
|
||||
- Disable asynchronous I/O as `io_uring` has been the source
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue