mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-05-12 16:32:15 -04:00
README.md: Note importance of microcode updates
This commit is contained in:
parent
538b312349
commit
cf435a8fa8
1 changed files with 3 additions and 1 deletions
|
@ -137,7 +137,9 @@ Networking:
|
||||||
|
|
||||||
Mitigations for known CPU vulnerabilities are enabled in their strictest form
|
Mitigations for known CPU vulnerabilities are enabled in their strictest form
|
||||||
and simultaneous multithreading (SMT) is disabled. See the
|
and simultaneous multithreading (SMT) is disabled. See the
|
||||||
`/etc/default/grub.d/40_cpu_mitigations.cfg` configuration file.
|
`/etc/default/grub.d/40_cpu_mitigations.cfg` configuration file. Note, to achieve
|
||||||
|
complete protection for known CPU vulnerabilities, the latest security microcode
|
||||||
|
(BIOS/UEFI) updates must also be installed on the system.
|
||||||
|
|
||||||
Boot parameters relating to kernel hardening, DMA mitigations, and entropy
|
Boot parameters relating to kernel hardening, DMA mitigations, and entropy
|
||||||
generation are outlined in the `/etc/default/grub.d/40_kernel_hardening.cfg`
|
generation are outlined in the `/etc/default/grub.d/40_kernel_hardening.cfg`
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue