security-misc/etc/default/grub.d
..
40_distrust_cpu.cfg
40_enable_iommu.cfg
40_kernel_hardening.cfg