Skip to content

Commit 0ce2ac1

Browse files
committed
Disable 32 bit emulation
Signed-off-by: Tommy <[email protected]>
1 parent e5607c7 commit 0ce2ac1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

content/posts/linux/Desktop Linux Hardening.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -307,7 +307,7 @@ Note however that disabling SMT may have a significant performance impact&nbsp;-
307307
##### Kernel
308308

309309
```
310-
slab_nomerge init_on_alloc=1 init_on_free=1 pti=on vsyscall=none page_alloc.shuffle=1 randomize_kstack_offset=on extra_latent_entropy debugfs=off oops=panic quiet loglevel=0
310+
slab_nomerge init_on_alloc=1 init_on_free=1 pti=on vsyscall=none ia32_emulation=0 page_alloc.shuffle=1 randomize_kstack_offset=on extra_latent_entropy debugfs=off oops=panic quiet loglevel=0
311311
```
312312

313313
Kicksecure does not enforce either `module.sig_enforce=1` or `lockdown=confidentiality` by default as they lead to a lot of hardware compatibility issues; consider enabling these if possible on your system. Additionally, [`mce=0` is no longer recommended](https://forums.whonix.org/t/kernel-hardening/7296/493).

0 commit comments

Comments
 (0)