Minor documentation changes

Kicksecure / security-misc

Kernel Hardening; Protect Linux User Accounts against Brute Force Attacks; Improve Entropy Collection; Strong Linux User Account Separation; Enhances Misc Security Settings - https://www.kicksecure.com/wiki/Security-misc

https://www.kicksecure.com/wiki/Impressum

Other

517 stars 51 forks source link

Minor documentation changes #244

Closed raja-grewal closed 4 months ago

raja-grewal commented 4 months ago

Several small documentation changes, fixes, and inclusions.

Changes

Due to the recent documentation upgrades providing a much clear explanations of various settings, should comment out kernel.io_uring_disabled=2 since it is not applicable till Linux kernel version 6.6.

Mandatory Checklist

[x] Legal agreements accepted. By contributing to this organisation, you acknowledge you have read, understood, and agree to be bound by these these agreements:

Optional Checklist

The following items are optional but might be requested in certain cases.

[x] I have tested it locally
[x] I have reviewed and updated any documentation if relevant
[ ] I am providing new code and test(s) for it

adrelanos commented 4 months ago

Do we have any disadvantage by just keeping kernel.io_uring_disabled=2 as is?

raja-grewal commented 4 months ago

Yes, it may cause some unexpected breakage when we eventually upgrade Debian.

I don't think we should have a sysctl by default that has not been tested?

Previously when I added this it was because of our previous hard-to-follow documentation. I think now it will be crystal clear what is currently applied and why other things will only be possible in the future.

adrelanos commented 4 months ago

Major comment changes should not be mixed with actual settings changes.

io_uring related:

adrelanos commented 4 months ago

I will merge this and then undo the io_uring related change. Please re-open the existing io_uring discussion(s) or open a new if needed.