Improve the list of the kernel parameters in TODO
authorAlexander Popov <alex.popov@linux.com>
Thu, 28 Nov 2019 17:24:55 +0000 (20:24 +0300)
committerAlexander Popov <alex.popov@linux.com>
Thu, 28 Nov 2019 17:24:55 +0000 (20:24 +0300)
kconfig-hardened-check.py

index 90e61e70056a81b9e8287bf176049eb7af86d789..733106cb589bcac431d1084623e9c6b882175f83 100755 (executable)
 #    page_poison=1
 #    slub_debug=FZP
 #    slab_nomerge
-#    pti=on
 #    kernel.kptr_restrict=1
-#    lockdown=1
+#    lockdown=1 (is it changed?)
+#    page_alloc.shuffle=1
+#    iommu=force (does it help against DMA attacks?)
 #
 #    Mitigations of CPU vulnerabilities:
 #       Аrch-independent: