New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Request for additional hardening] Use the recommended KSPP settings for the kernel #24

Open

theLOICofFRANCE opened this issue Oct 21, 2022 · 0 comments

Labels

theLOICofFRANCE commented Oct 21, 2022

Hi,

While remaining on the official Ubuntu kernels, it is possible to harden them to reduce the attack surface and complicate the life to the attacker.

Can you please update your script to edit /etc/default/grub (See "GRUB_CMDLINE_LINUX*") and /etc/sysctl.d/10-kernel-hardening.conf with this:

https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings#sysctls
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings#kernel_command_line_options

Thanks.

theLOICofFRANCE added the documentation label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment