mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-25 02:25:33 +07:00
Code Issues Packages Projects Releases Wiki Activity

Prevent kernel info leaks in console during boot.

Browse Source 
add kernel parameter `quiet loglevel=0`

https://phabricator.whonix.org/T950
This commit is contained in:
Patrick Schleizer 2020-04-23 12:26:31 -04:00
parent aa5631b02b
commit 6485df8126
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
etc/default/grub.d/40_kernel_hardening.cfg
View File

@ -59,3 +59,10 @@ fi
## Requires linux-hardened kernel patch. ## Requires linux-hardened kernel patch.
## https://github.com/anthraxx/linux-hardened ## https://github.com/anthraxx/linux-hardened
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX extra_latent_entropy" GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX extra_latent_entropy"
## Prevent kernel info leaks in console during boot.
## https://phabricator.whonix.org/T950
## str_replace is provided by package helper-scripts.
## Remove "quiet" from GRUB_CMDLINE_LINUX_DEFAULT because "quiet" must be first.
GRUB_CMDLINE_LINUX_DEFAULT="$(echo "$GRUB_CMDLINE_LINUX_DEFAULT" | str_replace "quiet" "")"
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX quiet loglevel=0"