mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-27 19:23:24 +02:00
linux: Enable Indirect Branch Tracking by default
This became upstream default (see https://www.phoronix.com/news/Linux-IBT-By-Default-Tip for IT news media coverage), and given its security-relevance, we should adopt this setting as well. Signed-off-by: Peter Müller <peter.mueller@ipfire.org> Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
@@ -11324,6 +11324,7 @@ etc/modprobe.d/ipv6.conf
|
||||
#lib/modules/KVER-ipfire/build/include/config/X86_INTERNODE_CACHE_SHIFT
|
||||
#lib/modules/KVER-ipfire/build/include/config/X86_IOPL_IOPERM
|
||||
#lib/modules/KVER-ipfire/build/include/config/X86_IO_APIC
|
||||
#lib/modules/KVER-ipfire/build/include/config/X86_KERNEL_IBT
|
||||
#lib/modules/KVER-ipfire/build/include/config/X86_L1_CACHE_SHIFT
|
||||
#lib/modules/KVER-ipfire/build/include/config/X86_LOCAL_APIC
|
||||
#lib/modules/KVER-ipfire/build/include/config/X86_MCE
|
||||
|
||||
Reference in New Issue
Block a user