Add the comment about kernel.sysrq=0

diff --git a/kconfig_hardened_check/checks.py b/kconfig_hardened_check/checks.py
index 850edd2f1bada62488e27465f9ed5beb11742d85..e571c50d9cddb81b81739d815078fe67920dd5ab 100644 (file)
--- a/kconfig_hardened_check/checks.py
+++ b/kconfig_hardened_check/checks.py
@@ -35,6 +35,7 @@ This module contains knowledge for checks.
 #    nosmt sysfs control file
 #    dev.tty.legacy_tiocsti=0
 #    vm.mmap_rnd_bits=max (?)
+#    kernel.sysrq=0
 #
 # Think of these boot params:
 #    module.sig_enforce=1