security-misc/etc/default/grub.d/40_remmount-secure.cfg

17 lines
628 B
INI
Raw Normal View History

2023-10-22 20:36:03 +07:00
## Copyright (C) 2023 - 2023 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## https://www.kicksecure.com/wiki/Security-misc#Remount_Secure
2023-10-23 03:12:26 +07:00
## Disable Remount Secure.
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure="0"
2023-10-22 20:36:03 +07:00
2023-10-23 03:12:26 +07:00
## Re-mount with nodev, nosuid only.
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure="1"
## Re-mount with nodev, nosuid and most with noexec except for /home.
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure="2"
## Re-mount with nodev, nosuid and all with noexec including /home.
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX remountsecure="3"