From cb8170fd800816c2f6123cd67819340da8f51551 Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Fri, 6 Sep 2019 11:44:56 +0000 Subject: [PATCH] comment --- etc/default/grub.d/40_only_allow_signed_modules.cfg | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/etc/default/grub.d/40_only_allow_signed_modules.cfg b/etc/default/grub.d/40_only_allow_signed_modules.cfg index a38c6d2..5441292 100644 --- a/etc/default/grub.d/40_only_allow_signed_modules.cfg +++ b/etc/default/grub.d/40_only_allow_signed_modules.cfg @@ -1,3 +1,4 @@ -# Requires every module to be signed before being loaded. Any module that is unsigned or signed with an invalid key cannot be loaded. -# This makes it harder to load a malicious module. +## Requires every module to be signed before being loaded. +## Any module that is unsigned or signed with an invalid key cannot be loaded. +## This makes it harder to load a malicious module. GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX module.sig_enforce=1"