Browse Source

etc/default/grub.d: add lockdown.cfg

master
Mikaela Suomalainen 4 days ago
parent
commit
b770e356cb
Signed by: mikaela <mikaela@mikaela.info> GPG Key ID: 99392F62BAE30723
1 changed files with 6 additions and 0 deletions
  1. +6
    -0
      etc/default/grub.d/lockdown.cfg

+ 6
- 0
etc/default/grub.d/lockdown.cfg View File

@@ -0,0 +1,6 @@
# Enable the kernel lockdown feature. If set to integrity, kernel features
# that allow userland to modify the running kernel are disabled. If set to
# confidentiality, kernel features that allow userland to extract
# confidential information from the kernel are also disabled.
# https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html
GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT lockdown=confidentiality"

Loading…
Cancel
Save