increased kernel.pix_max and fs.file-max values according to theoretical limits on 64-bit systems

This commit is contained in:
K4YT3X 2020-10-07 17:29:29 -04:00
parent f84b2472fa
commit 2f4267a8d9

View File

@ -1,8 +1,8 @@
# Name: K4YT3X Hardened sysctl Configuration
# Author: K4YT3X
# Contributors: IceCodeNew
# Date Created: October 5, 2020
# Last Updated: October 6, 2020
# Version: 1.1
# Last Updated: October 7, 2020
# Licensed under the GNU General Public License Version 3 (GNU GPL v3),
# available at: https://www.gnu.org/licenses/gpl-3.0.txt
@ -55,7 +55,10 @@ kernel.kexec_load_disabled = 1
kernel.unprivileged_userns_clone = 0
# allow for more PIDs
kernel.pid_max = 65536
# this value can be up to:
# - 32768 (2^15) on a 32-bit system
# - 4194304 (2^22) on a 64-bit system
kernel.pid_max = 4194304
# reboot machine after kernel panic
#kernel.panic = 10
@ -84,7 +87,10 @@ fs.protected_fifos = 2
fs.protected_regular = 2
# increase system file descriptor limit
fs.file-max = 65535
# this value can be up to:
# - 2147483647 (0x7fffffff) on a 32-bit system
# - 9223372036854775807 (0x7fffffffffffffff) on a 64-bit system
fs.file-max = 9223372036854775807
########## Virtualization ##########