Add intel-microcode package

Provides microcode updates to addres various Intel cpu-based vulnerabilities.
freedomofpress · Nov 19, 2018 · aeb9f1d · aeb9f1d
1 parent f286144
commit aeb9f1d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/install_files/ansible-base/group_vars/all/securedrop b/install_files/ansible-base/group_vars/all/securedrop
@@ -54,4 +54,4 @@ securedrop_cond_reboot_file: /tmp/sd-reboot-now
 # If you bump this, also remember to bump in molecule/builder/tests/vars.yml
 securedrop_pkg_grsec:
   ver: "4.4.144-1"
-  depends: "linux-image-4.4.135-grsec,linux-firmware-image-4.4.135-grsec,linux-image-4.4.144-grsec,linux-firmware-image-4.4.144-grsec"
+  depends: "intel-microcode,linux-image-4.4.135-grsec,linux-firmware-image-4.4.135-grsec,linux-image-4.4.144-grsec,linux-firmware-image-4.4.144-grsec"