diff options
| author | Denis Chevalier <perso@denischevalier.fr> | 2026-08-05 08:53:28 +0200 |
|---|---|---|
| committer | Denis Chevalier <perso@denischevalier.fr> | 2026-08-05 08:53:40 +0200 |
| commit | c80f00f5d1fc19223b62db74b33b7092ae7ce097 (patch) | |
| tree | 8bcf77ee035ef9bb59727688e1b6b2c7b26ae316 /etc/sysctl.d | |
| parent | 1cc8988e4499200edce5db7df4c0643fb2a66df9 (diff) | |
| download | postinstall-c80f00f5d1fc19223b62db74b33b7092ae7ce097.tar.gz postinstall-c80f00f5d1fc19223b62db74b33b7092ae7ce097.tar.bz2 postinstall-c80f00f5d1fc19223b62db74b33b7092ae7ce097.zip | |
add security config
Diffstat (limited to 'etc/sysctl.d')
| -rw-r--r-- | etc/sysctl.d/99-security.conf | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/etc/sysctl.d/99-security.conf b/etc/sysctl.d/99-security.conf new file mode 100644 index 0000000..34ba776 --- /dev/null +++ b/etc/sysctl.d/99-security.conf @@ -0,0 +1,5 @@ +kernel.kptr_restrict = 2 +net.core.bpf_jit_harden = 2 +kernel.yama.ptrace_scope = 1 +net.ipv4.conf.all.rp_filter = 1 +net.ipv4.conf.default.rp_filter = 1 |