diff options
| author | Denis Chevalier <perso@denischevalier.fr> | 2026-08-06 11:57:50 +0200 |
|---|---|---|
| committer | Denis Chevalier <perso@denischevalier.fr> | 2026-08-06 11:57:50 +0200 |
| commit | 679be32910d10cb93db5700157b7091a667800e9 (patch) | |
| tree | c6f95a8e53c74035f41a270c02365878f017d707 | |
| parent | dccc20459b19ea4516c0beba2db6f58b946cf344 (diff) | |
| download | postinstall-679be32910d10cb93db5700157b7091a667800e9.tar.gz postinstall-679be32910d10cb93db5700157b7091a667800e9.tar.bz2 postinstall-679be32910d10cb93db5700157b7091a667800e9.zip | |
add hardened overrides to allow for flatpak
| -rwxr-xr-x | etc.bash | 1 | ||||
| -rw-r--r-- | etc/sysctl.d/98-hardened-overrides.conf | 1 |
2 files changed, 2 insertions, 0 deletions
@@ -6,6 +6,7 @@ sudo cp -v etc/pam.d/system-local-login /etc/pam.d sudo cp -v etc/pam.d/login /etc/pam.d sudo cp -v etc/updatedb.conf /etc/ sudo cp -v etc/sysctl.d/99-security.conf /etc/sysctl.d +sudo cp -v etc/sysctl.d/98-hardened-overrides.conf /etc/sysctl.d sudo sysctl --system # firewall diff --git a/etc/sysctl.d/98-hardened-overrides.conf b/etc/sysctl.d/98-hardened-overrides.conf new file mode 100644 index 0000000..c4ee63d --- /dev/null +++ b/etc/sysctl.d/98-hardened-overrides.conf @@ -0,0 +1 @@ +kernel.unprivileged_userns_clone = 1 |