description

This commit is contained in:
Patrick Schleizer 2019-09-05 02:29:48 -04:00
parent a4913ae092
commit f2e5883b4c
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

3
debian/control vendored
View File

@ -64,6 +64,9 @@ Description: enhances misc security settings
.
* Coredumps are disabled as they may contain important information such as
encryption keys or passwords.
/etc/security/limits.d/disable-coredumps.conf
/etc/sysctl.d/coredumps.conf
/lib/systemd/coredump.conf.d/disable-coredumps.conf
.
* The thunderbolt and firewire modules are blacklisted as they can be used
for DMA (Direct Memory Access) attacks.