mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-08-03 10:16:16 -04:00
Set efi_pstore.pstore_disable=1
This commit is contained in:
parent
f643ebc2f9
commit
df2fc2cf6b
2 changed files with 15 additions and 0 deletions
|
@ -226,6 +226,9 @@ Kernel space:
|
|||
- Optional - Disable support for all x86 processes and syscalls (when using Linux kernel >= 6.7)
|
||||
to reduce attack surface.
|
||||
|
||||
- Disable EFI persistent storage feature, preventing the kernel from writing crash logs and
|
||||
other persistent data to the EFI variable store.
|
||||
|
||||
Direct memory access:
|
||||
|
||||
- Enable strict IOMMU translation to protect against some DMA attacks via the use
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue