From 3b7e984827a9b93d0d30b0b17457c5b1423dd5b3 Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Sat, 21 Jan 2023 15:30:56 +0300 Subject: [PATCH] Add the KSPP cmdline recommendations for x86_64 --- .../config_files/kspp-recommendations/kspp-cmdline-x86-64.config | 1 + 1 file changed, 1 insertion(+) create mode 100644 kconfig_hardened_check/config_files/kspp-recommendations/kspp-cmdline-x86-64.config diff --git a/kconfig_hardened_check/config_files/kspp-recommendations/kspp-cmdline-x86-64.config b/kconfig_hardened_check/config_files/kspp-recommendations/kspp-cmdline-x86-64.config new file mode 100644 index 0000000..f23733e --- /dev/null +++ b/kconfig_hardened_check/config_files/kspp-recommendations/kspp-cmdline-x86-64.config @@ -0,0 +1 @@ +init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on slab_nomerge pti=on nosmt slub_debug=ZF slub_debug=P page_poison=1 iommu.passthrough=0 iommu.strict=1 vsyscall=none -- 2.31.1