mirror of
https://github.com/Kicksecure/security-misc.git
synced 2024-10-01 08:25:45 -04:00
description, fix lintian warning
This commit is contained in:
parent
ce6b64a9ba
commit
d301e7f365
8
debian/control
vendored
8
debian/control
vendored
@ -42,8 +42,9 @@ Description: enhances misc security settings
|
|||||||
.
|
.
|
||||||
* The TCP/IP stack is hardened by disabling ICMP redirect acceptance,
|
* The TCP/IP stack is hardened by disabling ICMP redirect acceptance,
|
||||||
ICMP redirect sending and source routing to prevent man-in-the-middle attacks,
|
ICMP redirect sending and source routing to prevent man-in-the-middle attacks,
|
||||||
ignoring all ICMP requests, enabling TCP syncookies to prevent SYN flood attacks
|
ignoring all ICMP requests, enabling TCP syncookies to prevent SYN flood
|
||||||
and enabling RFC1337 to protect against time-wait assassination attacks.
|
attacks and enabling RFC1337 to protect against time-wait assassination
|
||||||
|
attacks.
|
||||||
.
|
.
|
||||||
* Some data spoofing attacks are made harder.
|
* Some data spoofing attacks are made harder.
|
||||||
.
|
.
|
||||||
@ -61,7 +62,8 @@ Description: enhances misc security settings
|
|||||||
* Kernel Page Table Isolation is enabled to mitigate Meltdown and increase
|
* Kernel Page Table Isolation is enabled to mitigate Meltdown and increase
|
||||||
KASLR effectiveness.
|
KASLR effectiveness.
|
||||||
.
|
.
|
||||||
* SMT is disabled as it can be used to exploit the MDS and other vulnerabilities.
|
* SMT is disabled as it can be used to exploit the MDS and other
|
||||||
|
vulnerabilities.
|
||||||
.
|
.
|
||||||
* All mitigations for the MDS vulnerability are enabled.
|
* All mitigations for the MDS vulnerability are enabled.
|
||||||
.
|
.
|
||||||
|
Loading…
Reference in New Issue
Block a user