mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-12-16 14:14:02 -05:00
readme
This commit is contained in:
parent
949edf3e17
commit
b8ba608535
1 changed files with 8 additions and 0 deletions
|
|
@ -393,12 +393,20 @@ executing `systemctl enable hide-hardware-info.service` as root.
|
||||||
|
|
||||||
Wiping RAM at shutdown to defeat cold boot attacks.
|
Wiping RAM at shutdown to defeat cold boot attacks.
|
||||||
|
|
||||||
|
Implemented as `dracut` module `cold-boot-attack-defense`.
|
||||||
|
|
||||||
Requires `dracut`. In other words, RAM wipe is incompatible with systems
|
Requires `dracut`. In other words, RAM wipe is incompatible with systems
|
||||||
using `initramfs-tools`. To switch to, install dracut:
|
using `initramfs-tools`. To switch to, install dracut:
|
||||||
|
|
||||||
sudo apt update
|
sudo apt update
|
||||||
sudo apt install --no-install-recommends dracut
|
sudo apt install --no-install-recommends dracut
|
||||||
|
|
||||||
|
`dracut` is intentionally not declared as a dependency of `security-misc` to
|
||||||
|
avoid making all of `security-misc` dependent on `dracut` only for the sake of
|
||||||
|
the wipe RAM at shutdown feature. Linux distribution such as Kicksecure are
|
||||||
|
advised to (and Kicksecure is planning to) install `dracut` instead of
|
||||||
|
`initramfs-tools` by default.
|
||||||
|
|
||||||
User documentation:
|
User documentation:
|
||||||
https://www.kicksecure.com/wiki/Cold_Boot_Attack_Defense
|
https://www.kicksecure.com/wiki/Cold_Boot_Attack_Defense
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue