From: Alexander Popov Date: Sun, 11 Aug 2024 13:56:58 +0000 (+0300) Subject: Update the KSPP recommendations (II) X-Git-Tag: v0.6.10~23 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=6fa4d942e5d7bb63d92d54b3aa58dfb2a4d20e1b;p=kconfig-hardened-check.git Update the KSPP recommendations (II) --- diff --git a/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt b/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt index f2a666c..dbd7fb6 100644 --- a/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt +++ b/kernel_hardening_checker/config_files/kspp-recommendations/kspp-cmdline-x86-64.txt @@ -1 +1 @@ -hardened_usercopy=1 init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on page_alloc.shuffle=1 slab_nomerge pti=on nosmt slub_debug=ZF slub_debug=P page_poison=1 iommu.passthrough=0 iommu.strict=1 mitigations=auto,nosmt vsyscall=none vdso32=0 cfi=kcfi +hardened_usercopy=1 init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on page_alloc.shuffle=1 slab_nomerge pti=on nosmt slub_debug=ZF slub_debug=P page_poison=1 iommu.passthrough=0 iommu.strict=1 mitigations=auto,nosmt kfence.sample_interval=100 vsyscall=none vdso32=0 cfi=kcfi