Disable rxrpc, kafs, af_key, esp4, esp6 across all systems that enable metacfg.base. None of them are used on these hosts, and they have a history of CVEs — blacklisting reduces kernel attack surface. |
||
|---|---|---|
| .. | ||
| acme-base | ||
| base | ||
| build | ||
| gui | ||
| homeprinter | ||
| nginx-base | ||
| opencode | ||
| podman | ||
| secureboot | ||
| systemd-email-notify | ||
| xremap | ||