README.md: Note importance of microcode updates

This commit is contained in:
raja-grewal 2025-01-10 13:22:21 +11:00 committed by GitHub
parent 538b312349
commit cf435a8fa8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -137,7 +137,9 @@ Networking:
Mitigations for known CPU vulnerabilities are enabled in their strictest form
and simultaneous multithreading (SMT) is disabled. See the
`/etc/default/grub.d/40_cpu_mitigations.cfg` configuration file.
`/etc/default/grub.d/40_cpu_mitigations.cfg` configuration file. Note, to achieve
complete protection for known CPU vulnerabilities, the latest security microcode
(BIOS/UEFI) updates must also be installed on the system.
Boot parameters relating to kernel hardening, DMA mitigations, and entropy
generation are outlined in the `/etc/default/grub.d/40_kernel_hardening.cfg`