From c80f00f5d1fc19223b62db74b33b7092ae7ce097 Mon Sep 17 00:00:00 2001
From: Denis Chevalier <perso@denischevalier.fr>
Date: Wed, 5 Aug 2026 08:53:28 +0200
Subject: add security config

---
 etc/sysctl.d/99-security.conf | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 etc/sysctl.d/99-security.conf

(limited to 'etc')

diff --git a/etc/sysctl.d/99-security.conf b/etc/sysctl.d/99-security.conf
new file mode 100644
index 0000000..34ba776
--- /dev/null
+++ b/etc/sysctl.d/99-security.conf
@@ -0,0 +1,5 @@
+kernel.kptr_restrict = 2
+net.core.bpf_jit_harden = 2
+kernel.yama.ptrace_scope = 1
+net.ipv4.conf.all.rp_filter = 1
+net.ipv4.conf.default.rp_filter = 1
-- 
cgit