From 198086188019474012ea9ebce9e024ac6adfe70f Mon Sep 17 00:00:00 2001 From: Raja Grewal Date: Fri, 30 Aug 2024 00:41:16 +1000 Subject: [PATCH 1/4] Update debugging relevant to kernel panics https://github.com/Kicksecure/security-misc/pull/268#issuecomment-2317112703 --- etc/sysctl.d/40_debug-misc.conf | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/etc/sysctl.d/40_debug-misc.conf b/etc/sysctl.d/40_debug-misc.conf index 8641405..14a6f77 100644 --- a/etc/sysctl.d/40_debug-misc.conf +++ b/etc/sysctl.d/40_debug-misc.conf @@ -6,7 +6,12 @@ #### category debugging #### description +#kerne.panic=60 kernel.panic_on_oops=0 +kernel.panic_on_warn=0 +#kernel.oops_limit=10000 +#kernel.warn_limit=0 + kernel.sysrq=1 fs.suid_dumpable=1 From 4f25ddefd2c5fe93c36f0d67e69a9e098c312e17 Mon Sep 17 00:00:00 2001 From: Raja Grewal Date: Fri, 30 Aug 2024 01:04:15 +1000 Subject: [PATCH 2/4] Do not force eventual reboot upon kernel panic --- etc/sysctl.d/40_debug-misc.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/sysctl.d/40_debug-misc.conf b/etc/sysctl.d/40_debug-misc.conf index 14a6f77..b995797 100644 --- a/etc/sysctl.d/40_debug-misc.conf +++ b/etc/sysctl.d/40_debug-misc.conf @@ -6,7 +6,7 @@ #### category debugging #### description -#kerne.panic=60 +#kernel.panic=0 kernel.panic_on_oops=0 kernel.panic_on_warn=0 #kernel.oops_limit=10000 From 258238d141c60e87d3f198ce09016dc6b46149a8 Mon Sep 17 00:00:00 2001 From: Raja Grewal Date: Fri, 30 Aug 2024 01:04:53 +1000 Subject: [PATCH 3/4] Allow infinite "oopses" --- etc/sysctl.d/40_debug-misc.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/sysctl.d/40_debug-misc.conf b/etc/sysctl.d/40_debug-misc.conf index b995797..5d4df75 100644 --- a/etc/sysctl.d/40_debug-misc.conf +++ b/etc/sysctl.d/40_debug-misc.conf @@ -9,7 +9,7 @@ #kernel.panic=0 kernel.panic_on_oops=0 kernel.panic_on_warn=0 -#kernel.oops_limit=10000 +#kernel.oops_limit=0 #kernel.warn_limit=0 kernel.sysrq=1 From 8a0a5db9d7c87d6f6b02059e34b0f77c91f147b9 Mon Sep 17 00:00:00 2001 From: raja-grewal Date: Sun, 1 Sep 2024 19:41:09 +1000 Subject: [PATCH 4/4] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index d2413a4..1c6e20a 100644 --- a/README.md +++ b/README.md @@ -15,7 +15,7 @@ Disables `/lib/systemd/coredump.conf.d/disable-coredumps.conf` by package `/etc/systemd/coredump.conf.d/disable-coredumps.conf` to `/dev/null`. `debian/debug-misc.links` -Disables `panic-on-oops`, `remove-system.map` by package `security-misc`. +Disables `panic-on-oops`,`panic-on-warn`, `remove-system.map` by package `security-misc`. `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if security-misc would not have lowered verbosity.