Search results

Disable the debugfs virtual filesystem

Status: Open.

#22 In KSPP/kspp.github.io;

· raja-grewal opened on Feb 18, 2026

Disable EFI persistent storage feature

Status: Open.

#21 In KSPP/kspp.github.io;

· raja-grewal opened on Feb 18, 2026

Add kernel panic and warning boot parameters

Status: Open.

#20 In KSPP/kspp.github.io;

· raja-grewal opened on Feb 18, 2026

Add AMD SME/SEV enabling boot parameters

Status: Open.

#19 In KSPP/kspp.github.io;

· raja-grewal opened on Feb 17, 2026

Missing early DMA protection boot parameter

Status: Open.

#18 In KSPP/kspp.github.io;

· raja-grewal opened on Feb 17, 2026

Flawed usage of mitigations=auto,nosmt

Status: Open.

#17 In KSPP/kspp.github.io;

· raja-grewal opened on Feb 17, 2026

Include boot parameter for ARM64 Meltdown mitigation

Status: Open.

#16 In KSPP/kspp.github.io;

· raja-grewal opened on Feb 16, 2026

Trusting CPU and bootloader as entropy sources

Status: Open.

#13 In KSPP/kspp.github.io;

· raja-grewal opened on Nov 5, 2025

Disabling user namespaces

Status: Open.

#11 In KSPP/kspp.github.io;

· ghost opened on Oct 14, 2025

set vm.panic_on_oom=2 to prevent security-critical processes such as screen lockers from getting randomly killed by kernel OOM?

Status: Open.

#9 In KSPP/kspp.github.io;

· adrelanos opened on Oct 10, 2025

Recommend disabling UNWIND_PATCH_PAC_INTO_SCS

Status: Open.

#2 In KSPP/kspp.github.io;

· a13xp0p0v opened on Jul 6, 2024