mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-07-31 07:10:24 +07:00
Add option to disable support for x86 processes and syscalls in the future
This commit is contained in:
@ -104,6 +104,9 @@ configuration file.
|
||||
|
||||
- Provide option to modify machine check exception handler.
|
||||
|
||||
- Provide option to disable support for all x86 processes and syscalls to reduce
|
||||
attack surface (when using Linux kernel version >= 6.7).
|
||||
|
||||
- Enable strict IOMMU translation to protect against DMA attacks and disable
|
||||
the busmaster bit on all PCI bridges during the early boot process.
|
||||
|
||||
|
Reference in New Issue
Block a user