diff options
| -rwxr-xr-x | etc.bash | 2 | ||||
| -rw-r--r-- | etc/sysctl.d/99-security.conf | 5 |
2 files changed, 7 insertions, 0 deletions
@@ -4,6 +4,8 @@ sudo cp -rv etc/keyd/* /etc/keyd/ sudo cp -v etc/pacman.conf /etc/ sudo cp -v etc/pam.d/system-local-login /etc/pam.d sudo cp -v etc/updatedb.conf /etc/ +sudo cp -v etc/sysctl.d/99-security.conf /etc/sysctl.d +sudo sysctl --system # firewall sudo ufw default deny incoming diff --git a/etc/sysctl.d/99-security.conf b/etc/sysctl.d/99-security.conf new file mode 100644 index 0000000..34ba776 --- /dev/null +++ b/etc/sysctl.d/99-security.conf @@ -0,0 +1,5 @@ +kernel.kptr_restrict = 2 +net.core.bpf_jit_harden = 2 +kernel.yama.ptrace_scope = 1 +net.ipv4.conf.all.rp_filter = 1 +net.ipv4.conf.default.rp_filter = 1 |