Update the KSPP recommendations

[kconfig-hardened-check.git] / kernel_hardening_checker / config_files / kspp-recommendations / kspp-cmdline-x86-64.txt

diff --git a/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt b/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt
index e053b2db0bb77c303aac81d811fd127ee0aef21d..f2a666c3928ddcac1d96f5c18c64eb1317cdc307 100644 (file)
--- a/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt
+++ b/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt
@@ -1 +1 @@
-hardened_usercopy=1 init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on page_alloc.shuffle=1 slab_nomerge pti=on nosmt slub_debug=ZF slub_debug=P page_poison=1 iommu.passthrough=0 iommu.strict=1 mitigations=auto,nosmt vsyscall=none vdso32=0
+hardened_usercopy=1 init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on page_alloc.shuffle=1 slab_nomerge pti=on nosmt slub_debug=ZF slub_debug=P page_poison=1 iommu.passthrough=0 iommu.strict=1 mitigations=auto,nosmt vsyscall=none vdso32=0 cfi=kcfi