Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-11 21:09:28 -05:00
Code Issues Packages Projects Releases Wiki Activity

add /etc/default/grub.d/40_cold_boot_attack_defense.cfg

Browse Source
This commit is contained in:
Patrick Schleizer 2022-07-05 10:28:22 -04:00
parent 69af8be7b8
commit b342ce930e
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
etc/default/grub.d/40_cold_boot_attack_defense.cfg Normal file
View File

@ -0,0 +1,17 @@
## Copyright (C) 2022 - 2022 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## RAM wipe is enabled by default on real hardware / bare metal.
## RAM wipe is disabled by in virtual machines (VMs).
## https://www.kicksecure.com/wiki/Dev/RAM_Wipe
## RAM wipe is omitted in virtual machines (VMs) by default because it is
## unclear if that could actually lead to the host operating system using
## swap. Through use of kernel parameter wiperam=force it is possible to
## force RAM wipe inside VMs which is useful for testing, development purposes.
#GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT wiperam=force"
## Kernel parameter wiperam=skip is provided to support disabling RAM wipe
## at shutdown, which might be useful to speed up shutdown or in case should
## there ever be issues.
#GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT wiperam=skip"