amadaluzia/alqueva
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sysctl.d, preparing for realtime support

Browse source
This commit is contained in:
xmm16 2024-12-13 22:58:03 -03:00
commit f51dfa1e90
No known key found for this signature in database
2 changed files with 13 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/micronix/config/sysctl.d/hardening.nix
View file

@ -12,7 +12,7 @@
"kernel.printk" = "3 3 3 3";
"kernel.sysrq" = "4";
"kernel.unprivileged_bpf_disabled" = "1";
"kernel.yama.ptrace_scope " = " 0";
"kernel.yama.ptrace_scope" = "0";
"net.core.bpf_jit_harden" = "2";
"net.ipv4.conf.all.accept_redirects" = "0";
"net.ipv4.conf.all.accept_source_route" = "0";
@ -30,7 +30,7 @@
"net.ipv4.tcp_rfc1337" = "1";
"net.ipv4.tcp_sack" = "0";
"net.ipv4.tcp_syncookies" = "1";
"net.ipv4.tcp_timestamps" = "0";
"net.ipv4.tcp_timestamps" = "1";
"net.ipv6.conf.all.accept_ra" = "0";
"net.ipv6.conf.all.accept_redirects" = "0";
"net.ipv6.conf.all.accept_source_route" = "0";