Mikaela
/
shell-things
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

etc/default/grub.d/lockdown.cfg: notes + lockdown=integrity comment

This commit is contained in:
Aminda Suomalainen 2020-02-13 02:03:21 +02:00
parent b770e356cb
commit a3d7b0af22
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
etc/default/grub.d/lockdown.cfg
View File

@ -3,4 +3,12 @@
# confidentiality, kernel features that allow userland to extract
# confidential information from the kernel are also disabled.
# https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html
GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT lockdown=confidentiality"
#GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT lockdown=integrity"
# Notes:
# * Zaldaryn loses ethernet in lockdown mode.
# * Itwjyg kernel panics (attempted to kill init) on lockdown=confidentiality,
# works with lockdown=integrity. MacBook weirdness?
# * Kincarron, Rbtpzn, have no problems.