diff --git a/etc/default/grub.d/40_kernel_hardening.cfg b/etc/default/grub.d/40_kernel_hardening.cfg new file mode 100644 index 0000000..0a39fa9 --- /dev/null +++ b/etc/default/grub.d/40_kernel_hardening.cfg @@ -0,0 +1,2 @@ +# Disables the merging of slabs of similar sizes. Sometimes a slab can be used in a vulnerable way which an attacker can exploit. +GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX slab_nomerge"