From 4aac2f4590d9ae7ffa707a662c41b7e460a0ea3a Mon Sep 17 00:00:00 2001
From: mudcam <v.nieutin@live.fr>
Date: Mon, 16 Apr 2018 15:26:11 +0200
Subject: Integration of Eli Mordechai's comments.

---
 security-blueprint/part-4/4-Debug.md | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'security-blueprint/part-4/4-Debug.md')

diff --git a/security-blueprint/part-4/4-Debug.md b/security-blueprint/part-4/4-Debug.md
index 5a1eb24..cce5fc0 100644
--- a/security-blueprint/part-4/4-Debug.md
+++ b/security-blueprint/part-4/4-Debug.md
@@ -16,6 +16,12 @@ Kernel-Debug-Symbols-1 | `CONFIG_DEBUG_INFO` | `n`
 
 These kernel debug symbols are enabled by other config items in the kernel. Care should be taken to disable those also. If `CONFIG_DEBUG_INFO` cannot be disabled, then enabling `CONFIG_DEBUG_INFO_REDUCED` is second best.
 
+<!-- section-note -->
+
+At least `CONFIG_DEBUG_INFO_REDUCED` should be always enabled for developers to convert addresses in oops messages to line numbers.
+
+<!-- end-section-note -->
+
 --------------------------------------------------------------------------------
 
 ## Disable Kprobes
-- 
cgit 1.2.3-korg