-
-
Notifications
You must be signed in to change notification settings - Fork 26
Description
The page in question: https://secureblue.dev/articles/kargs
-
The phrase 'kernel arguments' is never mention on the page. Even though it doesn't take much to deduce that "kargs" = "kernel arguments", it wouldn't hurt to make that clear.
-
Likewise, the actual command itself ("ujust set-kargs-hardening") is missing from the page. Again, it's extremely easy to deduce what the command is from the sentence: "Stable kargs that are always applied by the set-kargs-hardening ujust script." But still, it wouldn't hurt to make that clear.
-
Instructions for undoing the hardening ("ujust remove-kargs-hardening") is missing from the page. I initially tried "ujust unset-kargs-hardening", but when that failed, I searched the issues tracker until I discover that the command is in fact "ujust remove-kargs-hardening".
-
Under the 'Force disable simultaneous multithreading' section, there should be a disclaimer that enabling this argument will halve the number of CPU cores. Or maybe just include a link to the relevant FAQ item?: https://secureblue.dev/faq#smt
-
Under the 'Unstable kargs' section, it would be helpful if the sentence "These may cause issues on some hardware." was expounded upon a bit. Even a broad-strokes generalization along the lines of "so-and-so-brand GPU users have reported stability issues." would be nice. I say this because after initially being intimidated by the scary warning, I decided to turn on the unstable kargs anyway, but I am seeing no issues or instability. So my guess that for a specific hardware combination, it's stable and therefore safe to enable, and doesn't need the big scary warning.