security-misc

mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-12 17:00:32 +07:00

Files

Patrick Schleizer b9d65338bc unconditionally enable all CPU bugs (spectre, meltdown, L1TF, ...)

this might reduce performance

* `spectre_v2=on`
* `spec_store_bypass_disable=on`
* `tsx=off`
* `tsx_async_abort=full,nosmt`

Thanks to @madaidan for the suggestion!

https://forums.whonix.org/t/should-all-kernel-patches-for-cpu-bugs-be-unconditionally-enabled-vs-performance-vs-applicability/7647

2020-01-30 05:55:13 -05:00

apparmor.d/tunables/home.d

Delete usr.lib.security-misc.pam_tally2-info

2019-12-20 22:44:31 +00:00

apt/apt.conf.d

…

default/grub.d

unconditionally enable all CPU bugs (spectre, meltdown, L1TF, ...)

2020-01-30 05:55:13 -05:00

hide-hardware-info.d

…

initramfs-tools