Worked on security hardening for the google/go-tpm-tools repository, focusing on reducing the system’s attack surface and improving kernel interaction safety. Developed and delivered a kernel security control by scripting enhancements in bash, specifically adding sysctl settings to vgentrypoint.sh to disable kexec load. This approach ensured that once the sysctl was set, it became immutable, providing auditable and traceable security enforcement through clear commit messages. The work leveraged skills in scripting and system administration to implement a concrete, auditable security measure, addressing kernel execution risks from user space and contributing to more robust system security within the project’s scope.