mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-09 15:30:45 +07:00
Code Issues Packages Projects Releases Wiki Activity

Provide the option to disable legacy TIOCSTI operation

Browse Source
This commit is contained in:
Raja Grewal
2024-08-03 00:25:49 +10:00
parent 52aeacb4da
commit ca2179bb6a
2 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
usr/lib/sysctl.d/990-security-misc.conf
View File

@ -129,6 +129,13 @@ kernel.perf_event_paranoid=3
##
kernel.randomize_va_space=2
## Disable use of the legacy TIOCSTI operation which can be used to inject keypresses.
## Will break screen readers as can no longer push characters into a controlling TTY.
##
## This is disabled by default when using Linux kernel >= 6.2.
##
#dev.tty.legacy_tiocsti=0
## Disable asynchronous I/O for all processes.
## Leading cause of numerous kernel exploits.
## Disabling will reduce the read/write performance of storage devices.