Skip to content

Commit

Permalink
undo "force kernel to panic on "oopses"
Browse files Browse the repository at this point in the history
  • Loading branch information
adrelanos committed Jul 23, 2022
1 parent c1c04b4 commit 0c5b1e9
Showing 1 changed file with 6 additions and 1 deletion.
7 changes: 6 additions & 1 deletion etc/default/grub.d/40_kernel_hardening.cfg
Expand Up @@ -55,4 +55,9 @@ GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX extra_latent_entropy"
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX debugfs=off"

## Force the kernel to panic on "oopses" (which may be due to false positives)
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX oops=panic"
## https://forums.whonix.org/t/set-oops-panic-kernel-parameter-or-kernel-panic-on-oops-1-sysctl-for-better-security/7713
## Implemented differently:
## /usr/libexec/security-misc/panic-on-oops
## /etc/X11/Xsession.d/50panic_on_oops
## /etc/sudoers.d/security-misc
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX oops=panic"

0 comments on commit 0c5b1e9

Please sign in to comment.