Post #2593023
2026-05-07 22:43 UTC
@mirabilos@toot.mirbsd.org @dalias@hachyderm.io if you can't block authencesn (e.g. built into kernel), blocking esp4, esp6 and algif_aead is the fallback to cover that indirectly.
Replies (1)
-
@mirabilos@toot.mirbsd.org 2026-05-07 23:01
@equinox@chaos.social @dalias@hachyderm.io I see. $ cat /etc/modprobe.d/exploit-mitigations.conf install af_alg /bin/false install algif_aead /bin/false install authencesn /bin/false install esp4 /bin/false install esp6 /bin/false install rxrpc /bin/false