Issues

• Disable the debugfs virtual filesystem

  KSPP/kspp.github.io#22 · Filter by author raja-grewal opened on Feb 18, 2026

• Disable EFI persistent storage feature

  KSPP/kspp.github.io#21 · Filter by author raja-grewal opened on Feb 18, 2026

• Add kernel panic and warning boot parameters

  KSPP/kspp.github.io#20 · Filter by author raja-grewal opened on Feb 18, 2026

• Add AMD SME/SEV enabling boot parameters

  KSPP/kspp.github.io#19 · Filter by author raja-grewal opened on Feb 17, 2026

• Missing early DMA protection boot parameter

  KSPP/kspp.github.io#18 · Filter by author raja-grewal opened on Feb 17, 2026

• Flawed usage of mitigations=auto,nosmt

  KSPP/kspp.github.io#17 · Filter by author raja-grewal opened on Feb 17, 2026

• Include boot parameter for ARM64 Meltdown mitigation

  KSPP/kspp.github.io#16 · Filter by author raja-grewal opened on Feb 16, 2026

• Trusting CPU and bootloader as entropy sources

  KSPP/kspp.github.io#13 · Filter by author raja-grewal opened on Nov 5, 2025
  1

• Disabling user namespaces

  KSPP/kspp.github.io#11 · Filter by author ghost opened on Oct 14, 2025

• set vm.panic_on_oom=2 to prevent security-critical processes such as screen lockers from getting randomly killed by kernel OOM?

  KSPP/kspp.github.io#9 · Filter by author adrelanos opened on Oct 10, 2025
  2

• Recommend disabling UNWIND_PATCH_PAC_INTO_SCS

  KSPP/kspp.github.io#2 · Filter by author a13xp0p0v opened on Jul 6, 2024
  4