description

This commit is contained in:
Patrick Schleizer 2019-08-14 07:24:24 +00:00
parent dbea7d1511
commit f210294f40
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

3
debian/control vendored
View File

@ -57,6 +57,9 @@ Description: enhances misc security settings
* The SysRq key is restricted to only allow shutdowns/reboots.
A systemd service clears System.map on boot as these contain kernel symbols
that could be useful to an attacker.
/etc/kernel/postinst.d/30_remove-system-map
/lib/systemd/system/remove-system-map.service
/usr/lib/security-misc/remove-system.map
.
* Coredumps are disabled as they may contain important information such as
encryption keys or passwords.