mirror of
https://github.com/k4yt3x/sysctl.git
synced 2025-12-17 17:56:47 +00:00
docs(readme): add modules.sig_enforce boot param
Signed-off-by: k4yt3x <i@k4yt3x.com>
This commit is contained in:
parent
ce3419b623
commit
f1af91b397
@ -197,4 +197,8 @@ Additionally, here are some additional parameters that may be too restrictive fo
|
||||
# Restricts loading of unsigned kernel modules and other facilities
|
||||
# https://www.man7.org/linux/man-pages/man7/kernel_lockdown.7.html
|
||||
lockdown=confidentiality
|
||||
|
||||
# Enforce kernel module signature verification
|
||||
# Only allow signed kernel modules to be loaded
|
||||
modules.sig_enforce=1
|
||||
```
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user