security-misc/etc/default/grub.d
..
40_cpu_mitigations.cfg
40_distrust_bootloader.cfg
40_distrust_cpu.cfg
40_enable_iommu.cfg
40_kernel_hardening.cfg
40_only_allow_signed_modules.cfg
40_remmount-secure.cfg
41_quiet.cfg