This commit is contained in:
Patrick Schleizer 2019-09-06 11:47:17 +00:00
parent 5960c1682a
commit 51705c201b
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -11,8 +11,8 @@ the kernel. (!) Hence, this package disables this feature by shipping the
* Kernel symbols in /proc/kallsyms are hidden to prevent malware from
reading them and using them to learn more about what to attack on your system.
* Kexec is disabled as it can be used for live patching of the running
kernel.
* Kexec is disabled as it can be used to load a malicious kernel.
/etc/sysctl.d/kexec.conf
* ASLR effectiveness for mmap is increased.