/etc/default/grub.d/40_kernel_hardening.cfg fails to detect kernel upgrade
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Patrick
	Dec 23 2019, 12:53 PM

Tags

Referenced Files

None

Subscribers

Description

kver="$(uname -r)"

Confuses running kernel vs installed (upgraded) kernel.

Maybe better:

dpkg-query --show --showformat='${Version}' linux-image-amd64

https://github.com/Whonix/security-misc/blob/master/etc/default/grub.d/40_kernel_hardening.cfg

http://forums.whonix.org/t/kernel-hardening/7296/325

Details

Impact: Normal

Event Timeline

Patrick triaged this task as Normal priority.Dec 23 2019, 12:53 PM

Patrick created this task.

Herald added a project: Whonix. · View Herald TranscriptDec 23 2019, 12:53 PM

Herald added a subscriber: • entr0py. · View Herald Transcript

That worked.

https://github.com/Whonix/security-misc/pull/49

https://github.com/Whonix/security-misc/commit/ede536913daa0c7ddfe55e20c93d7b752daa5de3