webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-28 03:33:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

sysctl: add seperate sysctl-x86_64.conf and move x86_64 only parameters

Browse Source 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
Arne Fitzenreiter
2019-08-08 09:30:49 +02:00
parent c0f4a53034
commit 10dd2afd6d
7 changed files with 19 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
config/etc/sysctl-x86_64.conf Normal file
View File

@@ -0,0 +1,3 @@
# Improve KASLR effectiveness for mmap
vm.mmap_rnd_bits = 32
vm.mmap_rnd_compat_bits = 16

4
config/etc/sysctl.conf
View File

@@ -45,10 +45,6 @@ kernel.kptr_restrict = 2
# Avoid kernel memory address exposures via dmesg.
kernel.dmesg_restrict = 1
# Improve KASLR effectiveness for mmap
vm.mmap_rnd_bits = 32
vm.mmap_rnd_compat_bits = 16
# Minimal preemption granularity for CPU-bound tasks:
# (default: 1 msec# (1 + ilog(ncpus)), units: nanoseconds)
kernel.sched_min_granularity_ns = 10000000