From ecc71d7ae86358a769eac116b180ed66536799ab Mon Sep 17 00:00:00 2001
From: Alexander Popov <alex.popov@linux.com>
Date: Thu, 28 Nov 2019 20:24:55 +0300
Subject: [PATCH] Improve the list of the kernel parameters in TODO

---
 kconfig-hardened-check.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py
index 90e61e7..733106c 100755
--- a/kconfig-hardened-check.py
+++ b/kconfig-hardened-check.py
@@ -14,9 +14,10 @@
 #    page_poison=1
 #    slub_debug=FZP
 #    slab_nomerge
-#    pti=on
 #    kernel.kptr_restrict=1
-#    lockdown=1
+#    lockdown=1 (is it changed?)
+#    page_alloc.shuffle=1
+#    iommu=force (does it help against DMA attacks?)
 #
 #    Mitigations of CPU vulnerabilities:
 #       Аrch-independent:
-- 
2.31.1