V8.13.544.2025.12.05

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-12-05 11:49:54 +01:00
parent 0465582eb9
commit f1e24007ff
6 changed files with 96 additions and 4 deletions
--- a/README.md
+++ b/README.md
@@ -286,6 +286,8 @@ For further details see: **[90-ciss-local.hardened.md](docs/documentation/90-cis
 * **Description**: Disables and blacklists non-essential or insecure kernel modules.
 * **Rationale**: Minimizes attack surface by preventing loads of drivers or modules not required by the live environment.

+For further details see: **[30-ciss-hardening.conf.md](docs/documentation/30-ciss-hardening.conf.md)**
+
 ## 2.3. Network Hardening

 At the kernel level classical ``sysctl`` settings are applied that defend against spoofing and sloppy network behavior. Reverse path