add security config

2 files changed, 7 insertions, 0 deletions

diff --git a/etc.bash b/etc.bash
index 3cbf8da..ef2f3b6 100755
--- a/etc.bash
+++ b/etc.bash
@@ -4,6 +4,8 @@ sudo cp -rv etc/keyd/* /etc/keyd/
 sudo cp -v etc/pacman.conf /etc/
 sudo cp -v etc/pam.d/system-local-login /etc/pam.d
 sudo cp -v etc/updatedb.conf /etc/
+sudo cp -v etc/sysctl.d/99-security.conf /etc/sysctl.d
+sudo sysctl --system
 
 # firewall
 sudo ufw default deny incoming
diff --git a/etc/sysctl.d/99-security.conf b/etc/sysctl.d/99-security.conf
new file mode 100644
index 0000000..34ba776
--- /dev/null
+++ b/etc/sysctl.d/99-security.conf
@@ -0,0 +1,5 @@
+kernel.kptr_restrict = 2
+net.core.bpf_jit_harden = 2
+kernel.yama.ptrace_scope = 1
+net.ipv4.conf.all.rp_filter = 1
+net.ipv4.conf.default.rp_filter = 1