This commit is contained in:
Patrick Schleizer 2022-07-07 15:28:09 -04:00
parent ca19d78d48
commit d5c1650341
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -151,9 +151,10 @@ abused to write to arbitrary memory.
* Disables a large array of uncommon file systems and network file systems that reduces the attack surface especially against legacy approaches.
* Provides some blocking of the interface between the [Intel Management Engine (ME)](https://www.kernel.org/doc/html/latest/driver-api/mei/mei.html) and the OS.
* Disables the use of CD-ROM devices by default.
* Provides some blocking of the interface between the [Intel Management Engine (ME)](https://www.kernel.org/doc/html/latest/driver-api/mei/mei.html) and the OS.
### Other
* A systemd service clears the System.map file on boot as these contain kernel