Commit 8cd5f6e8 by Alexander Popov

Add more kernel command line parameters to comments

Going to use them in future
parent a0ce919f
...@@ -18,11 +18,19 @@ ...@@ -18,11 +18,19 @@
# kernel.kptr_restrict=1 # kernel.kptr_restrict=1
# lockdown=1 # lockdown=1
# #
# Mitigations of CPU vulnerabilities:
# Аrch-independent:
# mitigations=auto,nosmt
# X86:
# spectre_v2=on # spectre_v2=on
# pti=on # pti=on
# spec_store_bypass_disable=on # spec_store_bypass_disable=on
# l1tf=full,force # l1tf=full,force
# # mds=full,nosmt
# ARM64:
# ? CONFIG_HARDEN_BRANCH_PREDICTOR
# kpti=on
# ssbd=force-on
# #
# N.B. Hardening sysctl's: # N.B. Hardening sysctl's:
# net.core.bpf_jit_harden # net.core.bpf_jit_harden
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment