Think about kptr_restrict later (KSPP recommends to set it to 1)

a486a640 · Alexander Popov · 361e571e · a486a640
Commit a486a640 authored Jun 19, 2021 by Alexander Popov
Hide whitespace changes
Inline Side-by-side

Showing with 1 additions and 1 deletions

__init__.py kconfig_hardened_check/__init__.py +1 -1

No files found.
--- a/kconfig_hardened_check/__init__.py
+++ b/kconfig_hardened_check/__init__.py
@@ -35,7 +35,7 @@
 #           ssbd=force-on
 #
 # N.B. Hardening sysctls:
-#    kernel.kptr_restrict=2
+#    kernel.kptr_restrict=2 (or 1?)
 #    kernel.dmesg_restrict=1
 #    kernel.perf_event_paranoid=3
 #    kernel.kexec_load_disabled=1