add some hardening

This commit is contained in:
desolate
2026-06-22 12:22:40 +03:00
parent 031a79f163
commit 76b6aa95c6
4 changed files with 10 additions and 1 deletions
+1 -1
View File
@@ -6,7 +6,7 @@ GRUB_DEFAULT=0
#GRUB_HIDDEN_TIMEOUT_QUIET=false
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="Void"
GRUB_CMDLINE_LINUX_DEFAULT="loglevel=2 apparmor=1 security=apparmor"
GRUB_CMDLINE_LINUX_DEFAULT="quiet loglevel=0 apparmor=1 security=apparmor slab_nomerge init_on_alloc=1 init_on_free=1 page_alloc.shuffle=1 pti=on randomize_kstack_offset=on vsyscall=on debugfs=off ipv6.disable=1 random.trust_cpu=off"
# Uncomment to use basic console
#GRUB_TERMINAL_INPUT="console"
# Uncomment to disable graphical terminal