diff --git a/README.md b/README.md index 29654c4..5e029c8 100644 --- a/README.md +++ b/README.md @@ -43,7 +43,7 @@ space, user space, core dumps, and swap space. - Randomize the addresses (ASLR) for mmap base, stack, VDSO pages, and heap. -- Provide the option to disable asynchronous I/O as `io_uring` has been the source +- Disable asynchronous I/O as `io_uring` has been the source of numerous kernel exploits (when using Linux kernel version >= 6.6). - Restrict usage of `ptrace()` to only processes with `CAP_SYS_PTRACE` as it diff --git a/usr/lib/sysctl.d/990-security-misc.conf b/usr/lib/sysctl.d/990-security-misc.conf index e302047..7b07033 100644 --- a/usr/lib/sysctl.d/990-security-misc.conf +++ b/usr/lib/sysctl.d/990-security-misc.conf @@ -128,7 +128,7 @@ kernel.randomize_va_space=2 ## ## Applicable when using Linux kernel >= 6.6 (retained here for future-proofing and completeness). ## -#kernel.io_uring_disabled=2 +kernel.io_uring_disabled=2 ## 2. User Space: ##