description

This commit is contained in:
Patrick Schleizer 2019-09-05 02:28:43 -04:00
parent a2aeb401a2
commit a4913ae092
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

3
debian/control vendored
View File

@ -55,7 +55,8 @@ Description: enhances misc security settings
* All mitigations for the MDS vulnerability are enabled.
.
* The SysRq key is restricted to only allow shutdowns/reboots.
A systemd service clears System.map on boot as these contain kernel symbols
.
* A systemd service clears System.map on boot as these contain kernel symbols
that could be useful to an attacker.
/etc/kernel/postinst.d/30_remove-system-map
/lib/systemd/system/remove-system-map.service