Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-06 14:54:59 -04:00
Code Issues Projects Releases Packages Wiki Activity

Provide the option to disable legacy TIOCSTI operation

Browse source
This commit is contained in:
Raja Grewal 2024-08-03 00:25:49 +10:00
parent 52aeacb4da
commit ca2179bb6a
No known key found for this signature in database
GPG key ID: 92CA473C156B64C4
2 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
usr/lib/sysctl.d/990-security-misc.conf
View file

@ -129,6 +129,13 @@ kernel.perf_event_paranoid=3
##
kernel.randomize_va_space=2
## Disable use of the legacy TIOCSTI operation which can be used to inject keypresses.
## Will break screen readers as can no longer push characters into a controlling TTY.
##
## This is disabled by default when using Linux kernel >= 6.2.
##
#dev.tty.legacy_tiocsti=0
## Disable asynchronous I/O for all processes.
## Leading cause of numerous kernel exploits.
## Disabling will reduce the read/write performance of storage devices.