Add reference and move text

This commit is contained in:
raja-grewal 2024-11-13 05:38:03 +00:00 committed by GitHub
parent a1d1f97955
commit c2aae73ce1
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 15 additions and 14 deletions

View file

@ -102,6 +102,9 @@ Networking:
- Disable ICMP redirect acceptance and redirect sending messages to prevent
man-in-the-middle attacks and minimize information disclosure.
- Optional - Drop gratuitous ARP packets to prevent ARP cache poisoning
via man-in-the-middle and denial-of-service attacks.
- Ignore ICMP echo requests to prevent clock fingerprinting and Smurf attacks.
- Ignore bogus ICMP error responses.
@ -121,9 +124,6 @@ Networking:
- Optional - Enable IPv6 Privacy Extensions.
- Optional - Drop gratuitous ARP packets to prevent ARP cache poisoning
via man-in-the-middle and denial-of-service attacks.
### Boot parameters
Mitigations for known CPU vulnerabilities are enabled in their strictest form