diff --git a/etc/default/grub.d/40_kernel_hardening.cfg b/etc/default/grub.d/40_kernel_hardening.cfg index a6dfb3e..5f8476e 100644 --- a/etc/default/grub.d/40_kernel_hardening.cfg +++ b/etc/default/grub.d/40_kernel_hardening.cfg @@ -55,4 +55,9 @@ GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX extra_latent_entropy" GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX debugfs=off" ## Force the kernel to panic on "oopses" (which may be due to false positives) -GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX oops=panic" +## https://forums.whonix.org/t/set-oops-panic-kernel-parameter-or-kernel-panic-on-oops-1-sysctl-for-better-security/7713 +## Implemented differently: +## /usr/libexec/security-misc/panic-on-oops +## /etc/X11/Xsession.d/50panic_on_oops +## /etc/sudoers.d/security-misc +#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX oops=panic"