mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-07-14 18:00:54 +07:00
comment
This commit is contained in:
@ -7,6 +7,7 @@
|
||||
## /etc/sysctl.d/40_ram-wipe.conf that sets 'kernel.kexec_load_disabled=0'.
|
||||
## Once systemd-sysctl.service has set 'kernel.kexec_load_disabled=1',
|
||||
## it cannot be undone without a reboot. This is an upstream Linux security feature.
|
||||
## Instead, ram-wipe will config-package-dev 'hide' this file.
|
||||
|
||||
## Disables kexec, which can be used to replace the running kernel.
|
||||
## Kexec is useful for live kernel patching without rebooting.
|
||||
|
Reference in New Issue
Block a user