mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-24 21:57:55 +07:00
Code Issues Packages Projects Releases Wiki Activity

readme

Browse Source
This commit is contained in:
Patrick Schleizer 2022-07-05 11:05:36 -04:00
parent b8ba608535
commit 92ff868ece
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
README.md
View File

@ -172,7 +172,10 @@ encryption keys or passwords. See:
* An initramfs hook sets the sysctl values in `/etc/sysctl.conf` and * An initramfs hook sets the sysctl values in `/etc/sysctl.conf` and
`/etc/sysctl.d` before init is executed so sysctl hardening is enabled `/etc/sysctl.d` before init is executed so sysctl hardening is enabled
as early as possible. as early as possible. This is implemented for `initramfs-tools` only because
this is not needed for `dracut` because `dracut` does that by default, at least
on `systemd` enabled systems. Not researched for non-`systemd` systems by the
author of this part of the readme.
## Network hardening ## Network hardening
@ -407,6 +410,8 @@ the wipe RAM at shutdown feature. Linux distribution such as Kicksecure are
advised to (and Kicksecure is planning to) install `dracut` instead of advised to (and Kicksecure is planning to) install `dracut` instead of
`initramfs-tools` by default. `initramfs-tools` by default.
Only tested on `systemd` enabled systems.
User documentation: User documentation:
https://www.kicksecure.com/wiki/Cold_Boot_Attack_Defense https://www.kicksecure.com/wiki/Cold_Boot_Attack_Defense