summaryrefslogtreecommitdiff
path: root/etc/sysctl.d/99-security.conf
diff options
context:
space:
mode:
Diffstat (limited to 'etc/sysctl.d/99-security.conf')
-rw-r--r--etc/sysctl.d/99-security.conf5
1 files changed, 5 insertions, 0 deletions
diff --git a/etc/sysctl.d/99-security.conf b/etc/sysctl.d/99-security.conf
new file mode 100644
index 0000000..34ba776
--- /dev/null
+++ b/etc/sysctl.d/99-security.conf
@@ -0,0 +1,5 @@
+kernel.kptr_restrict = 2
+net.core.bpf_jit_harden = 2
+kernel.yama.ptrace_scope = 1
+net.ipv4.conf.all.rp_filter = 1
+net.ipv4.conf.default.rp_filter = 1