mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-28 05:40:19 +07:00
Code Issues Packages Projects Releases Wiki Activity

Update docs regarding Intel module disabling

Browse Source
This commit is contained in:
Raja Grewal
2024-08-07 14:01:49 +10:00
parent 20454fb811
commit 50fa721fd5
2 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
etc/modprobe.d/30_security-misc_disable.conf
View File

@ -119,7 +119,8 @@ install gnss-usb /usr/bin/disabled-gps-by-security-misc
## Intel Management Engine (ME):
## Partially disable the Intel ME interface with the OS.
## ME functionality has increasing become more intertwined with basic Intel system operation.
## Disabling may lead to breakages in places such as security, power management, display, and DRM.
## Disabling may lead to breakages in numerous places without clear debugging/error messages.
## May cause issues with firmware updates, security, power management, display, and DRM.
##
## https://www.kernel.org/doc/html/latest/driver-api/mei/mei.html
## https://en.wikipedia.org/wiki/Intel_Management_Engine#Security_vulnerabilities
@ -140,7 +141,7 @@ install gnss-usb /usr/bin/disabled-gps-by-security-misc
#install mei_wdt /usr/bin/disabled-intelme-by-security-misc
#install microread_mei /usr/bin/disabled-intelme-by-security-misc
## Intel Platform Monitoring Technology Telemetry (PMT):
## Intel Platform Monitoring Technology (PMT) Telemetry:
## Disable some functionality of the Intel PMT components.
##
## https://github.com/intel/Intel-PMT