From a82448d46af4fb9dce2de84025b8b820a11fae01 Mon Sep 17 00:00:00 2001
From: Patrick Schleizer <adrelanos@riseup.net>
Date: Wed, 14 Aug 2019 07:01:25 +0000
Subject: [PATCH] description

---
 debian/control | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/debian/control b/debian/control
index f4b60f0..4141302 100644
--- a/debian/control
+++ b/debian/control
@@ -69,6 +69,11 @@ Description: enhances misc security settings
   * The kernel now panics on oopses to prevent it from continuing running a
  flawed process.
  .
+ Requires every module to be signed before being loaded. Any module that is
+ unsigned or signed with an invalid key cannot be loaded. This makes it harder
+ to load a malicious module.
+ /etc/default/grub.d/40_only_allow_signed_modules.cfg
+ .
  Uncommon network protocols are blacklisted:
  These are rarely used and may have unknown vulnerabilities.
  /etc/modprobe.d/uncommon-network-protocols.conf