diff options
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/sysctl.d/99-security.conf | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/etc/sysctl.d/99-security.conf b/etc/sysctl.d/99-security.conf new file mode 100644 index 0000000..34ba776 --- /dev/null +++ b/etc/sysctl.d/99-security.conf @@ -0,0 +1,5 @@ +kernel.kptr_restrict = 2 +net.core.bpf_jit_harden = 2 +kernel.yama.ptrace_scope = 1 +net.ipv4.conf.all.rp_filter = 1 +net.ipv4.conf.default.rp_filter = 1 |