Peter Müller 447d0bf51e linux: Disable io_uring ...

This subsystem has been a frequent source of security vulnerabilities
affecting the Linux kernel; as a result, Google announced on June 14,
2023, that they would disable it in their environment as widely as
possible.

IPFire does not depend on the availability of io_uring. Therefore,
disable this subsystem as well in order to preemptively cut attack
surface.

See also: https://security.googleblog.com/2023/06/learnings-from-kctf-vrps-42-linux.html

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2023-10-20 08:44:26 +00:00

..

ipfire_logo.ppm

kernel: Add IPFire logo at boot time.

2010-12-13 02:17:16 +01:00

kernel.config.aarch64-ipfire

linux: Disable io_uring

2023-10-20 08:44:26 +00:00

kernel.config.riscv64-ipfire

kernel: update to 6.1.57

2023-10-13 08:13:12 +00:00

kernel.config.x86_64-ipfire

linux: Disable io_uring

2023-10-20 08:44:26 +00:00

x509.genkey

kernel: enable and enforce signed kernel modules

2020-02-06 15:09:52 +01:00