From c80f00f5d1fc19223b62db74b33b7092ae7ce097 Mon Sep 17 00:00:00 2001 From: Denis Chevalier Date: Wed, 5 Aug 2026 08:53:28 +0200 Subject: add security config --- etc.bash | 2 ++ etc/sysctl.d/99-security.conf | 5 +++++ 2 files changed, 7 insertions(+) create mode 100644 etc/sysctl.d/99-security.conf diff --git a/etc.bash b/etc.bash index 3cbf8da..ef2f3b6 100755 --- a/etc.bash +++ b/etc.bash @@ -4,6 +4,8 @@ sudo cp -rv etc/keyd/* /etc/keyd/ sudo cp -v etc/pacman.conf /etc/ sudo cp -v etc/pam.d/system-local-login /etc/pam.d sudo cp -v etc/updatedb.conf /etc/ +sudo cp -v etc/sysctl.d/99-security.conf /etc/sysctl.d +sudo sysctl --system # firewall sudo ufw default deny incoming diff --git a/etc/sysctl.d/99-security.conf b/etc/sysctl.d/99-security.conf new file mode 100644 index 0000000..34ba776 --- /dev/null +++ b/etc/sysctl.d/99-security.conf @@ -0,0 +1,5 @@ +kernel.kptr_restrict = 2 +net.core.bpf_jit_harden = 2 +kernel.yama.ptrace_scope = 1 +net.ipv4.conf.all.rp_filter = 1 +net.ipv4.conf.default.rp_filter = 1 -- cgit