X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=kernel_hardening_checker%2Fconfig_files%2Fkspp-recommendations%2Fkspp-cmdline-x86-64.txt;h=e053b2db0bb77c303aac81d811fd127ee0aef21d;hb=b68d118a4c2a4e40c458f1498bc3948f6881a959;hp=f23733e677fd4214ca8c96370dea9c5878c6a393;hpb=35f90af9096a0dad868107ea6dc005468badd5c3;p=kconfig-hardened-check.git diff --git a/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt b/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt index f23733e..e053b2d 100644 --- a/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt +++ b/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt @@ -1 +1 @@ -init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on slab_nomerge pti=on nosmt slub_debug=ZF slub_debug=P page_poison=1 iommu.passthrough=0 iommu.strict=1 vsyscall=none +hardened_usercopy=1 init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on page_alloc.shuffle=1 slab_nomerge pti=on nosmt slub_debug=ZF slub_debug=P page_poison=1 iommu.passthrough=0 iommu.strict=1 mitigations=auto,nosmt vsyscall=none vdso32=0