mirror of
https://github.com/Kicksecure/security-misc.git
synced 2024-12-26 15:39:31 -05:00
12 lines
604 B
INI
12 lines
604 B
INI
# Disables the merging of slabs of similar sizes. Sometimes a slab can be used in a vulnerable way which an attacker can exploit.
|
|
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX slab_nomerge"
|
|
|
|
# Enables sanity checks (F), redzoning (Z) and poisoning (P).
|
|
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX slab_debug=FZP"
|
|
|
|
# Wipes free memory so it can't leak in various ways and prevents some use-after-free vulnerabilites.
|
|
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX page_poison=1"
|
|
|
|
# Makes the kernel panic on uncorrectable errors in ECC memory that an attacker could exploit.
|
|
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX mce=0"
|