Add option to disable support for x86 processes and syscalls in the future

This commit is contained in:
Raja Grewal
2024-07-15 02:02:01 +10:00
parent f550fbe07c
commit 99038c7a06
2 changed files with 12 additions and 0 deletions

View File

@ -104,6 +104,9 @@ configuration file.
- Provide option to modify machine check exception handler.
- Provide option to disable support for all x86 processes and syscalls to reduce
attack surface (when using Linux kernel version >= 6.7).
- Enable strict IOMMU translation to protect against DMA attacks and disable
the busmaster bit on all PCI bridges during the early boot process.