mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-05-05 03:18:00 +02:00
45022af1b8
The second version of this patch splits this up into different architecture-specific sysctl config files, as i586 does not support BPF JIT, hence the net.core.bpf_jit_harden does not exist on that architecture. Fixes: #12384 Signed-off-by: Peter Müller <peter.mueller@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 lines
171 B
Plaintext
7 lines
171 B
Plaintext
# Improve KASLR effectiveness for mmap
|
|
vm.mmap_rnd_bits = 32
|
|
vm.mmap_rnd_compat_bits = 16
|
|
|
|
# Turn on BPF JIT hardening, if the JIT is enabled.
|
|
net.core.bpf_jit_harden = 2
|