Commit Graph

133 Commits

Author SHA1 Message Date
e3a3207a44 Clarify DMA hardening 2024-08-16 12:41:36 +10:00
73db68dbf9 Add details on KFENCE 2024-08-09 14:27:30 +10:00
15c638acad Add reference on RDRAND 2024-08-09 13:36:47 +10:00
d8bcec881f Add some notices for future Debian 13 rebase 2024-08-09 13:33:32 +10:00
e5a38fc856 Typo 2024-08-09 13:30:15 +10:00
a25aaf900a Merge pull request #260 from raja-grewal/vdso32
Enable `vdso32=0`
2024-08-06 09:55:20 -04:00
6bc039a430 Merge pull request #259 from raja-grewal/kfence
Enable `kfence.sample_interval=100`
2024-08-06 09:52:56 -04:00
8559079312 Enable vdso32=0 2024-08-05 15:10:02 +10:00
d102ec1997 Enable kfence.sample_interval=100 2024-08-05 15:07:56 +10:00
aa34d86598 Enable slab_debug=FZ 2024-08-05 14:27:17 +10:00
6d97408a6d Merge pull request #255 from raja-grewal/SLUB
Restore option to enable `slub_debug=FZ`
2024-08-04 16:11:46 -04:00
6f14d68cdc Update legacy name slub_debug -> slab_debug 2024-08-03 15:12:15 +10:00
22b6cee80c Add details about slub_debug 2024-08-03 15:11:14 +10:00
b77d1a2b98 Revert "Remove the optional slub_debug parameter since it is no longer recommended"
This reverts commit 48e1ac4163.
2024-08-03 14:49:48 +10:00
52aeacb4da Provide option to disable 32 bit vDSO mappings 2024-08-03 00:13:38 +10:00
9099ecce8a Provide option to enable the kernel Electric-Fence 2024-08-03 00:12:50 +10:00
f6a16258a1 Add references to KSPP 2024-08-03 00:11:06 +10:00
e53d24fc48 Add missing GRUB command lines for disabled boot parameters 2024-08-03 00:09:42 +10:00
4397de0138 Update description of cfi=kcfi kerenel parameter 2024-07-26 11:30:46 +10:00
1135d34ab3 Reword description of cfi=kcfi kerenel parameter 2024-07-24 23:33:36 +10:00
fb494c2ba5 Update docs relating to the cfi=kcfi kernel parameter 2024-07-23 13:12:13 +10:00
d6fc71dba7 Add option to switch (back) to using kCFI in the future 2024-07-22 17:26:00 +10:00
06894d1c98 Typo 2024-07-19 18:30:42 +10:00
faa9181a6c Typos 2024-07-18 12:19:27 +10:00
d454f36c63 spelling 2024-07-17 11:52:29 -04:00
f4da582aa3 spelling 2024-07-17 11:44:17 -04:00
9e976474d5 spelling 2024-07-17 11:40:51 -04:00
b569fc02a4 spelling 2024-07-17 11:38:53 -04:00
d29a616142 minor 2024-07-17 08:39:20 -04:00
81a3715c7c Add info regarding the downsides of disabling SMT 2024-07-17 13:32:08 +10:00
49594ccb22 Partially revert f4d652fa7b 2024-07-17 00:49:25 +10:00
73f6d4b26f Fix transcription error 2024-07-16 01:03:41 +10:00
b2657bc61f Improve docs 2024-07-15 15:05:00 +10:00
c8385d82fb Clarify instructions for increasing log verbosity 2024-07-15 14:57:40 +10:00
d229e8b04d Fix link 2024-07-15 14:50:29 +10:00
f4d652fa7b Update presentation of quiet loglevel=0 2024-07-15 14:39:12 +10:00
48e1ac4163 Remove the optional slub_debug parameter since it is no longer recommended 2024-07-15 02:04:25 +10:00
99038c7a06 Add option to disable support for x86 processes and syscalls in the future 2024-07-15 02:02:01 +10:00
f550fbe07c Add option to disable the entire IPv6 stack functionality 2024-07-15 01:59:04 +10:00
a33d4cd099 Refactor existing kernel parameters for clarity 2024-07-15 01:56:25 +10:00
1bb843ec38 Update Copyright (C) to 2024 2024-05-11 13:18:36 +10:00
4694268b8f Remove a word 2024-05-05 12:52:51 +00:00
8f7768ce96 Add vendor links 2024-05-05 12:50:39 +00:00
0c031a29d3 RFDS mitigation on Intel Atom CPUs (including E-cores) 2024-05-01 13:55:09 +10:00
1122b3402c GDS mitigation for CPUs 2024-05-01 13:50:42 +10:00
c002bd62e8 Clarify use of mitigations=auto 2024-05-01 13:49:34 +10:00
d89d7e8ef8 Add reference for RETBleed 2024-05-01 13:49:00 +10:00
015dcc4212 Add reference for SSB 2024-05-01 13:48:13 +10:00
de4f4be947 Merge spectre mitigations 2024-05-01 13:47:40 +10:00
965c8641fd Update BHI mitigation reference 2024-05-01 13:47:02 +10:00