grsecurity module: tweak lockTunables option description

This commit is contained in:
Joachim Fasting 2016-07-14 17:44:05 +02:00
parent cef7150bc7
commit 59c9a88a6b
No known key found for this signature in database
GPG Key ID: 4330820E1E04DCF4

View File

@ -31,9 +31,9 @@ in
description = ''
Whether to automatically lock grsecurity tunables
(<option>boot.kernel.sysctl."kernel.grsecurity.*"</option>). Disable
this to allow configuration of grsecurity features while the system is
running. The lock can be manually engaged by activating the
<literal>grsec-lock</literal> service unit.
this to allow runtime configuration of grsecurity features. Activate
the <literal>grsec-lock</literal> service unit to prevent further
configuration until the next reboot.
'';
};