From ac224b270a3a0945d187202f8cca89af0e71a166 Mon Sep 17 00:00:00 2001 From: monsieuremre <130907164+monsieuremre@users.noreply.github.com> Date: Thu, 2 Nov 2023 13:01:55 +0000 Subject: [PATCH] disable sysrq --- usr/lib/sysctl.d/990-security-misc.conf | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/usr/lib/sysctl.d/990-security-misc.conf b/usr/lib/sysctl.d/990-security-misc.conf index 547dbeb..41f39e2 100644 --- a/usr/lib/sysctl.d/990-security-misc.conf +++ b/usr/lib/sysctl.d/990-security-misc.conf @@ -137,11 +137,8 @@ net.ipv4.tcp_timestamps=0 #### meta end -## Only allow the SysRq key to be used for shutdowns and the -## Secure Attention Key (SAK). -## -## https://forums.whonix.org/t/sysrq-magic-sysrq-key/8079/ -kernel.sysrq=132 +## Disable SysRq key +kernel.sysrq=0 ## Restrict loading TTY line disciplines to CAP_SYS_MODULE to prevent ## unprivileged attackers from loading vulnerable line disciplines