Skip to content

Commit

Permalink
debian/control syntax fix
Browse files Browse the repository at this point in the history
  • Loading branch information
Patrick Schleizer committed Jun 23, 2019
1 parent a098b18 commit 4e32438
Showing 1 changed file with 15 additions and 15 deletions.
30 changes: 15 additions & 15 deletions debian/control
Expand Up @@ -60,38 +60,38 @@ Description: enhances misc security settings
.
Hence, this package disables this feature by shipping the
/etc/sysctl.d/nf_conntrack_helper.conf configuration file.

.
Kernel symbols in /proc/kallsyms are hidden to prevent malware from
reading them and using them to learn more about what to attack on your system.

.
Kexec is disabled as it can be used for live patching of the running kernel.

.
The BPF JIT compiler is restricted to the root user and is hardened.

.
ASLR effectiveness for mmap is increased.

.
The ptrace system call is restricted to the root user only.

.
The TCP/IP stack is hardened.

.
This package makes some data spoofing attacks harder.

.
SACK is disabled as it is commonly exploited and is rarely used.

.
This package disables the merging of slabs of similar sizes to prevent an
attacker from exploiting them.

.
Sanity checks, redzoning, and memory poisoning are enabled.

.
The kernel now panics on uncorrectable errors in ECC memory which could
be exploited.

.
Kernel Page Table Isolation is enabled to mitigate Meltdown and increase
KASLR effectiveness.

.
SMT is disabled as it can be used to exploit the MDS vulnerability.

.
All mitigations for the MDS vulnerability are enabled.

.
DCCP, SCTP, TIPC and RDS are blacklisted as they are rarely used and may have
unknown vulnerabilities.

0 comments on commit 4e32438

Please sign in to comment.