diff --git a/README.md b/README.md index 0b016ed..753d6aa 100644 --- a/README.md +++ b/README.md @@ -151,9 +151,10 @@ abused to write to arbitrary memory. * Disables a large array of uncommon file systems and network file systems that reduces the attack surface especially against legacy approaches. +* Provides some blocking of the interface between the [Intel Management Engine (ME)](https://www.kernel.org/doc/html/latest/driver-api/mei/mei.html) and the OS. + * Disables the use of CD-ROM devices by default. -* Provides some blocking of the interface between the [Intel Management Engine (ME)](https://www.kernel.org/doc/html/latest/driver-api/mei/mei.html) and the OS. ### Other * A systemd service clears the System.map file on boot as these contain kernel