diff --git a/etc/default/grub.d/40_kernel_hardening.cfg b/etc/default/grub.d/40_kernel_hardening.cfg index ec26311..0506e49 100644 --- a/etc/default/grub.d/40_kernel_hardening.cfg +++ b/etc/default/grub.d/40_kernel_hardening.cfg @@ -13,8 +13,6 @@ GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX mce=0" # Enables Kernel Page Table Isolation which mitigates Meltdown and improves KASLR. GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX pti=on" -# Disables smt which can be used to exploit the MDS vulnerability. -GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX nosmt" - # Enables all mitigations for the MDS vulnerability. -GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX mds=full" +# Disables smt which can be used to exploit the MDS vulnerability. +GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX mds=full,nosmt"