diff --git a/config/files/usr/share/ublue-os/just/60-custom.just.readme.md b/config/files/usr/share/ublue-os/just/60-custom.just.readme.md index 3a5ffb7..1d1b97f 100644 --- a/config/files/usr/share/ublue-os/just/60-custom.just.readme.md +++ b/config/files/usr/share/ublue-os/just/60-custom.just.readme.md @@ -1,3 +1,4 @@ +## Included in set-kargs-hardening **Zero newly allocated pages and heaps, mitigating use-after-free vulnerabilities** @@ -23,10 +24,6 @@ `vsyscall=none` -**Disable debugfs to prevent exposure of sensitive kernel information** - -`debugfs=off` - **Enable kernel lockdown in the strictest mode** `lockdown=confidentiality` @@ -65,6 +62,12 @@ `mitigations=auto,nosmt` +## Included in set-kargs-hardening-unstable + **Fill IOMMU protection gap by setting the busmaster bit during early boot** `efi=disable_early_pci_dma` + +**Disable debugfs to prevent exposure of sensitive kernel information** + +`debugfs=off`