sysctl: add seperate sysctl-x86_64.conf and move x86_64 only parameters

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
Arne Fitzenreiter
2019-08-08 09:30:49 +02:00
parent c0f4a53034
commit 10dd2afd6d
7 changed files with 19 additions and 4 deletions

View File

@@ -0,0 +1,3 @@
# Improve KASLR effectiveness for mmap
vm.mmap_rnd_bits = 32
vm.mmap_rnd_compat_bits = 16

View File

@@ -45,10 +45,6 @@ kernel.kptr_restrict = 2
# Avoid kernel memory address exposures via dmesg.
kernel.dmesg_restrict = 1
# Improve KASLR effectiveness for mmap
vm.mmap_rnd_bits = 32
vm.mmap_rnd_compat_bits = 16
# Minimal preemption granularity for CPU-bound tasks:
# (default: 1 msec# (1 + ilog(ncpus)), units: nanoseconds)
kernel.sched_min_granularity_ns = 10000000

View File

@@ -42,6 +42,7 @@ etc/profile.d/umask.sh
etc/resolv.conf
etc/securetty
etc/sysctl.conf
#etc/sysctl-x86_64.conf
etc/syslog.conf
etc/system-release
#home

View File

@@ -42,6 +42,7 @@ etc/profile.d/umask.sh
etc/resolv.conf
etc/securetty
etc/sysctl.conf
etc/sysctl-x86_64.conf
etc/syslog.conf
etc/system-release
#home

View File

@@ -9,6 +9,7 @@ etc/rc.d/init.d/functions
etc/rc.d/init.d/leds
etc/rc.d/init.d/networking/red.down/05-remove-dns-forwarders
etc/rc.d/init.d/partresize
etc/rc.d/init.d/sysctl
etc/rc.d/init.d/unbound
etc/sysctl.conf
usr/sbin/setup

View File

@@ -0,0 +1 @@
etc/sysctl-x86_64.conf

View File

@@ -24,6 +24,18 @@ case "${1}" in
sysctl -q -p
evaluate_retval
fi
arch=`uname -m`
case "${arch}" in
i?86 ) arch="i586";
;;
armv*) arch="armv5tel":
;;
esac
if [ -f "/etc/sysctl-${arch}.conf" ]; then
boot_mesg "Setting ${arch}-kernel runtime parameters..."
sysctl -q -p /etc/sysctl-${arch}.conf
evaluate_retval
fi
;;
status)