mirror of
https://github.com/PrivSec-dev/privsec.dev
synced 2024-11-13 18:11:33 -05:00
Remove extra_latent_entropy
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
0f8ca4d10d
commit
34bb760d13
@ -307,7 +307,7 @@ Note however that disabling SMT may have a significant performance impact -
|
||||
##### Kernel
|
||||
|
||||
```
|
||||
slab_nomerge init_on_alloc=1 init_on_free=1 pti=on vsyscall=none ia32_emulation=0 page_alloc.shuffle=1 randomize_kstack_offset=on extra_latent_entropy debugfs=off oops=panic quiet loglevel=0
|
||||
slab_nomerge init_on_alloc=1 init_on_free=1 pti=on vsyscall=none ia32_emulation=0 page_alloc.shuffle=1 randomize_kstack_offset=on debugfs=off oops=panic quiet loglevel=0
|
||||
```
|
||||
|
||||
Kicksecure does not enforce either `module.sig_enforce=1` or `lockdown=confidentiality` by default as they lead to a lot of hardware compatibility issues; consider enabling these if possible on your system. Additionally, [`mce=0` is no longer recommended](https://forums.whonix.org/t/kernel-hardening/7296/493).
|
||||
|
Loading…
Reference in New Issue
Block a user