Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-23 00:11:05 -05:00
Code Issues Packages Projects Releases Wiki Activity

Prevent kernel info leaks in console during boot.

Browse Source 
By setting `kernel.printk = 3 3 3 3`.

https://phabricator.whonix.org/T950

Thanks to @madaidan for the suggestion!
This commit is contained in:
Patrick Schleizer 2020-04-16 08:00:31 -04:00
parent 4898a9e753
commit 8d2e4b68dc
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/sysctl.d/30_security-misc.conf
View File

@ -8,6 +8,10 @@ kernel.core_pattern=|/bin/false
## Restricts the kernel log to root only. ## Restricts the kernel log to root only.
kernel.dmesg_restrict=1 kernel.dmesg_restrict=1
## Prevent kernel info leaks in console during boot.
## https://phabricator.whonix.org/T950
kernel.printk = 3 3 3 3
## Don't allow writes to files that we don't own ## Don't allow writes to files that we don't own
## in world writable sticky directories, unless ## in world writable sticky directories, unless
## they are owned by the owner of the directory. ## they are owned by the owner of the directory.