use amd_iommu=force_isolation instead of amd_iommu=force_enable

because we set `iommu=force` already anyhow

fixes https://github.com/Kicksecure/security-misc/issues/175
This commit is contained in:
Patrick Schleizer 2023-12-04 11:02:55 -05:00
parent e83c1d7ed6
commit c9ea7a4dca
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -2,7 +2,7 @@
## See the file COPYING for copying conditions.
## Enables IOMMU to prevent DMA attacks.
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX intel_iommu=on amd_iommu=force_enable"
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX intel_iommu=on amd_iommu=force_isolation"
## Disable the busmaster bit on all PCI bridges during very
## early boot to avoid holes in IOMMU.