External/sysctl
1
0
Fork 0
mirror of https://github.com/k4yt3x/sysctl.git synced 2025-12-23 20:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12 from k4yt3x/1.7

Browse Source 
1.7
This commit is contained in:
K4YT3X 2022-08-04 12:25:00 -04:00 committed by GitHub
commit 0b3910d9fb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
sysctl.conf
View File

@ -2,12 +2,14 @@
# Author: K4YT3X # Author: K4YT3X
# Contributor: IceCodeNew # Contributor: IceCodeNew
# Contributor: HorlogeSkynet # Contributor: HorlogeSkynet
# Contributor: shenzhui007
# Contributor: HorlogeSkynet
# Date Created: October 5, 2020 # Date Created: October 5, 2020
# Last Updated: October 15, 2021 # Last Updated: August 4, 2022
# Licensed under the GNU General Public License Version 3 (GNU GPL v3), # Licensed under the GNU General Public License Version 3 (GNU GPL v3),
# available at: https://www.gnu.org/licenses/gpl-3.0.txt # available at: https://www.gnu.org/licenses/gpl-3.0.txt
# (C) 2020-2021 K4YT3X # (C) 2020-2022 K4YT3X
# Multiple sources have been consulted while writing this configuration # Multiple sources have been consulted while writing this configuration
# file (e.g., nixCraft's sysctl.conf). Sources are not cited since this # file (e.g., nixCraft's sysctl.conf). Sources are not cited since this
@ -69,6 +71,9 @@ kernel.perf_event_paranoid = 3
kernel.perf_cpu_time_max_percent = 1 kernel.perf_cpu_time_max_percent = 1
kernel.perf_event_max_sample_rate = 1 kernel.perf_event_max_sample_rate = 1
# prevent unprivileged attackers from loading vulnerable line disciplines with the TIOCSETD ioctl
dev.tty.ldisc_autoload = 0
########## File System ########## ########## File System ##########
# disallow core dumping by SUID/SGID programs # disallow core dumping by SUID/SGID programs
@ -110,9 +115,13 @@ fs.inotify.max_user_watches = 524288
# do not allow mmap in lower addresses # do not allow mmap in lower addresses
vm.mmap_min_addr = 65536 vm.mmap_min_addr = 65536
# improve mmap ASLR effectness # improve mmap ASLR effectiveness
vm.mmap_rnd_bits=32 vm.mmap_rnd_bits = 32
vm.mmap_rnd_compat_bits=16 vm.mmap_rnd_compat_bits = 16
# prevent unprivileged users from accessing userfaultfd
# restricts syscall to the privileged users or the CAP_SYS_PTRACE capability
vm.unprivileged_userfaultfd = 0
########## Networking ########## ########## Networking ##########