summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDenis Chevalier <perso@denischevalier.fr>2026-08-06 12:01:33 +0200
committerDenis Chevalier <perso@denischevalier.fr>2026-08-06 12:01:33 +0200
commit887da572a8fabc9b1a337c47a53daf2db7082ff8 (patch)
tree195e3ebf22e32fe85dec2b71c535f8bbbef447b5
parent679be32910d10cb93db5700157b7091a667800e9 (diff)
downloadpostinstall-887da572a8fabc9b1a337c47a53daf2db7082ff8.tar.gz
postinstall-887da572a8fabc9b1a337c47a53daf2db7082ff8.tar.bz2
postinstall-887da572a8fabc9b1a337c47a53daf2db7082ff8.zip
set ipv4 conf to loose mode (2)
-rw-r--r--etc/sysctl.d/99-security.conf4
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/sysctl.d/99-security.conf b/etc/sysctl.d/99-security.conf
index 34ba776..ca4c696 100644
--- a/etc/sysctl.d/99-security.conf
+++ b/etc/sysctl.d/99-security.conf
@@ -1,5 +1,5 @@
kernel.kptr_restrict = 2
net.core.bpf_jit_harden = 2
kernel.yama.ptrace_scope = 1
-net.ipv4.conf.all.rp_filter = 1
-net.ipv4.conf.default.rp_filter = 1
+net.ipv4.conf.all.rp_filter = 2
+net.ipv4.conf.default.rp_filter = 2