inference
838428152e
Disable kvm.nx_huge_pages mitigation. Disable L1 Terminal Fault mitigation due to current CPU not being vulnerable. Disable Microarchitectural Data Sampling mitigation due to current CPU not being vulnerable. Disable MMIO stale data mitigation due to current CPU not being vulnerable. Disable Page Table Isolation mitigation due to current CPU not being vulnerable. Disable Retbleed mitigation due to current CPU not being vulnerable. Enable Spectre V2 mitigation due to current CPU being vulnerable. Enable Speculative Store Bypass mitigation due to current CPU being vulnerable. Disable Special Register Buffer Data Sampling mitigation due to current CPU not being vulnerable. Disable Transactional Synchronization Extensions mitigation async abort due to current CPU not being vulnerable. Disable debugfs. Enable initialize-on-allocation to ensure memory is zeroed on allocation. Enable initialize-on-free to ensure memory is zeroed on free. Enable page allocation shuffle. Enable randomize kstack offset. Disable SLAB merging. Disable vsyscall. Disable SMT for protection against potential security issues. Remove CPU mitigations not applicable to current CPU. Remove wireless support. Build system firmware into kernel.