Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-03-03 01:29:16 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add references to KSPP

Browse Source
This commit is contained in:
Raja Grewal 2024-08-03 00:11:06 +10:00
parent e53d24fc48
commit f6a16258a1
No known key found for this signature in database
GPG Key ID: 92CA473C156B64C4
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
etc/default/grub.d/40_kernel_hardening.cfg
View File

@ -18,6 +18,7 @@ kver="$(dpkg-query --show --showformat='${Version}' "$kpkg")" 2>/dev/null || tru
## 1. Kernel Space: ## 1. Kernel Space:
## ##
## https://madaidans-insecurities.github.io/guides/linux-hardening.html#boot-parameters ## https://madaidans-insecurities.github.io/guides/linux-hardening.html#boot-parameters
## https://kspp.github.io/Recommended_Settings#kernel-command-line-options
## Disable merging of slabs with similar size. ## Disable merging of slabs with similar size.
## Reduces the risk of triggering heap overflows. ## Reduces the risk of triggering heap overflows.

1
usr/lib/sysctl.d/990-security-misc.conf
View File

@ -23,6 +23,7 @@
## 1. Kernel Space: ## 1. Kernel Space:
## ##
## https://madaidans-insecurities.github.io/guides/linux-hardening.html#sysctl-kernel ## https://madaidans-insecurities.github.io/guides/linux-hardening.html#sysctl-kernel
## https://kspp.github.io/Recommended_Settings#sysctls
## https://wiki.archlinux.org/title/Security#Kernel_hardening ## https://wiki.archlinux.org/title/Security#Kernel_hardening
## Restrict kernel address visibility via /proc and other interfaces, regardless of user privileges. ## Restrict kernel address visibility via /proc and other interfaces, regardless of user privileges.