From 51705c201bd9959a77a53201e492100b751d0508 Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Fri, 6 Sep 2019 11:47:17 +0000 Subject: [PATCH] readme --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 9f3860b..42ed68a 100644 --- a/README.md +++ b/README.md @@ -11,8 +11,8 @@ the kernel. (!) Hence, this package disables this feature by shipping the * Kernel symbols in /proc/kallsyms are hidden to prevent malware from reading them and using them to learn more about what to attack on your system. -* Kexec is disabled as it can be used for live patching of the running -kernel. +* Kexec is disabled as it can be used to load a malicious kernel. +/etc/sysctl.d/kexec.conf * ASLR effectiveness for mmap is increased.