Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-25 07:30:54 -04:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request from madaidan/msr

Browse source 
Blacklist CPU MSRs
This commit is contained in:
Patrick Schleizer 2019-12-22 15:26:07 +00:00 • committed by GitHub
commit bce02ffdc0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 0 deletions
debian
control
etc/modprobe.d
msr.conf

3
debian/control vendored
View file

@ -103,6 +103,9 @@ Description: enhances misc security settings
/lib/systemd/system/hide-hardware-info.service
/lib/systemd/system/user@.service.d/sysfs.conf
/etc/hide-hardware-info.d/30_default.conf
.
* The MSR kernel module is blacklisted to prevent CPU MSRs from being
abused to write to arbitrary memory.
.
Improve Entropy Collection
.

3
etc/modprobe.d/msr.conf Normal file
View file

@ -0,0 +1,3 @@
# Blacklist CPU MSRs as they can be abused to write to
# arbitrary memory.
install msr /bin/false