Kernel Hardening - security-misc

[Patrick]

@madaidan

The System.map files should be removed. By default, /boot/System.map-* contains kernel symbols which could be useful to an attacker.

What creates system-map files and can we suppress creation rather than deleting those?

We delete those but that doesn’t help much if these get created later on. Better prevent creation than “only” deleting.