Disable 32-bit legacy vsyscalls and 32-bit application support?

Should Kicksecure disable disable legacy 32-bit vsyscalls via abi.vsyscall32 = 0 ?

I'm on the fence about disabling 32 emulation support via ia32_emulation=0 since that would disable application support for 32-bit applications that people might use with wine / bottles or virtualization of things like Windows 7 or 32 bit ISO/IMG's (Not Kicksecure obviously)

Thoughts?

[raja-grewal]

I think this sysctl setting is sort of redundant as in #260 we already set the vdso32=0 kernel boot parameter?

The kernel docs also suggest the same.

However, I am ok with adding this to the existing list if no one objects.

Regarding ia32_emulation=0, in #315 it was decided that our user base is probably primarily concerned with hardening by default. Users who wish to use 32-bit applications on Kicksecure/Whonix can easily undo this single setting if they wish.

[ArrayBolt3]

@adrelanos This can be closed since the relevant PR has been merged.