docs(readme): add modules.sig_enforce boot param

Signed-off-by: k4yt3x <i@k4yt3x.com>
This commit is contained in:
k4yt3x 2025-10-19 00:00:00 +00:00
parent ce3419b623
commit f1af91b397
No known key found for this signature in database

View File

@ -197,4 +197,8 @@ Additionally, here are some additional parameters that may be too restrictive fo
# Restricts loading of unsigned kernel modules and other facilities # Restricts loading of unsigned kernel modules and other facilities
# https://www.man7.org/linux/man-pages/man7/kernel_lockdown.7.html # https://www.man7.org/linux/man-pages/man7/kernel_lockdown.7.html
lockdown=confidentiality lockdown=confidentiality
# Enforce kernel module signature verification
# Only allow signed kernel modules to be loaded
modules.sig_enforce=1
``` ```