From 92ff868ecefed4377c5f1e99eb5e5eecbb021564 Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Tue, 5 Jul 2022 11:05:36 -0400 Subject: [PATCH] readme --- README.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index bc7e406..d7c9ea4 100644 --- a/README.md +++ b/README.md @@ -172,7 +172,10 @@ encryption keys or passwords. See: * An initramfs hook sets the sysctl values in `/etc/sysctl.conf` and `/etc/sysctl.d` before init is executed so sysctl hardening is enabled -as early as possible. +as early as possible. This is implemented for `initramfs-tools` only because +this is not needed for `dracut` because `dracut` does that by default, at least +on `systemd` enabled systems. Not researched for non-`systemd` systems by the +author of this part of the readme. ## Network hardening @@ -407,6 +410,8 @@ the wipe RAM at shutdown feature. Linux distribution such as Kicksecure are advised to (and Kicksecure is planning to) install `dracut` instead of `initramfs-tools` by default. +Only tested on `systemd` enabled systems. + User documentation: https://www.kicksecure.com/wiki/Cold_Boot_Attack_Defense