Files
security-misc/etc/default/grub.d/40_only_allow_signed_modules.cfg
Patrick Schleizer cb8170fd80 comment
2019-09-06 11:44:56 +00:00

5 lines
252 B
INI

## Requires every module to be signed before being loaded.
## Any module that is unsigned or signed with an invalid key cannot be loaded.
## This makes it harder to load a malicious module.
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX module.sig_enforce=1"