This commit is contained in:
Raja Grewal 2024-08-16 13:12:07 +10:00
parent e3a3207a44
commit 9212a4e937
No known key found for this signature in database
GPG Key ID: 92CA473C156B64C4
2 changed files with 3 additions and 3 deletions

View File

@ -145,9 +145,9 @@ configuration file.
- Force kernel panics on "oopses" to potentially indicate and thwart certain
kernel exploitation attempts.
- Provide the option to modify machine check exception handler.
- Provide the option to modify the machine check exception handler.
- Disallow sensitive kernel information leaks in the console during boot.
- Prevent sensitive kernel information leaks in the console during boot.
- Enable the kernel Electric-Fence sampling-based memory safety error detector
which can identify heap out-of-bounds access, use-after-free, and invalid-free errors.

View File

@ -349,7 +349,7 @@ net.ipv6.conf.default.accept_ra=0
#net.ipv4.tcp_dsack=0
## Disable TCP timestamps to limit device fingerprinting via system time.
## Timestamps allows round-trip time measurement and protection against wrapped sequence numbers.
## Timestamps allow round-trip time measurement and protection against wrapped sequence numbers.
## Disabling timestamps on very fast links is likely to cause TCP Sequence Numbers to wrap.
## Segments with wrapped numbers will be incorrectly discarded, reducing network performance.
##