diff --git a/etc/default/grub.d/40_kernel_hardening.cfg b/etc/default/grub.d/40_kernel_hardening.cfg index e456416..6bdbff2 100644 --- a/etc/default/grub.d/40_kernel_hardening.cfg +++ b/etc/default/grub.d/40_kernel_hardening.cfg @@ -53,3 +53,9 @@ fi #if dpkg --compare-versions "${kver}" ge "5.4"; then # GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX lockdown=confidentiality" #fi + +## Gather more entropy during boot. +## +## Requires linux-hardened kernel patch. +## https://github.com/anthraxx/linux-hardened +GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX extra_latent_entropy"