mirror of
https://github.com/tommytran732/Fedora-CoreOS-Ignition
synced 2024-09-07 17:13:30 -04:00
Enable module sig enforce and lockdown=confidentiality
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
f5411aab36
commit
2ecb5662fc
@ -12,6 +12,8 @@
|
||||
"nosmt=force",
|
||||
"l1d_flush=on",
|
||||
"spec_rstack_overflow=safe-ret",
|
||||
"module.sig_enforce=1",
|
||||
"lockdown=confidentiality",
|
||||
"random.trust_bootloader=off",
|
||||
"random.trust_cpu=off",
|
||||
"intel_iommu=on",
|
||||
|
@ -192,6 +192,8 @@ kernel_arguments:
|
||||
- nosmt=force
|
||||
- l1d_flush=on
|
||||
- spec_rstack_overflow=safe-ret
|
||||
- module.sig_enforce=1
|
||||
- lockdown=confidentiality
|
||||
- random.trust_bootloader=off
|
||||
- random.trust_cpu=off
|
||||
- intel_iommu=on
|
||||
|
@ -12,6 +12,8 @@
|
||||
"nosmt=force",
|
||||
"l1d_flush=on",
|
||||
"spec_rstack_overflow=safe-ret",
|
||||
"module.sig_enforce=1",
|
||||
"lockdown=confidentiality",
|
||||
"random.trust_bootloader=off",
|
||||
"random.trust_cpu=off",
|
||||
"intel_iommu=on",
|
||||
|
@ -256,6 +256,8 @@ kernel_arguments:
|
||||
- nosmt=force
|
||||
- l1d_flush=on
|
||||
- spec_rstack_overflow=safe-ret
|
||||
- module.sig_enforce=1
|
||||
- lockdown=confidentiality
|
||||
- random.trust_bootloader=off
|
||||
- random.trust_cpu=off
|
||||
- intel_iommu=on
|
||||
|
Loading…
Reference in New Issue
Block a user