webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-28 11:43:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

sysctl.conf: Turn on hard- and symlink protection

Browse Source 
Cc: Michael Tremer <michael.tremer@ipfire.org>
Cc: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
Peter Müller
2020-01-23 21:28:00 +00:00
committed by Arne Fitzenreiter
parent 6075720c48
commit 29a8992b72
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
config/etc/sysctl.conf
View File

@@ -45,6 +45,10 @@ kernel.kptr_restrict = 2
# Avoid kernel memory address exposures via dmesg. # Avoid kernel memory address exposures via dmesg.
kernel.dmesg_restrict = 1 kernel.dmesg_restrict = 1
# Turn on hard- and symlink protection
fs.protected_symlinks = 1
fs.protected_hardlinks = 1
# Minimal preemption granularity for CPU-bound tasks: # Minimal preemption granularity for CPU-bound tasks:
# (default: 1 msec# (1 + ilog(ncpus)), units: nanoseconds) # (default: 1 msec# (1 + ilog(ncpus)), units: nanoseconds)
kernel.sched_min_granularity_ns = 10000000 kernel.sched_min_granularity_ns = 10000000