External/sysctl
1
0
Fork 0
mirror of https://github.com/k4yt3x/sysctl.git synced 2025-12-18 02:06:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

added recommendations from ANSSI (perf subsystem + vm low addr mapping)

Browse Source 
> https://www.ssi.gouv.fr/uploads/2016/01/linux_configuration-fr-v1.2.pdf#section.6.2
This commit is contained in:
Samuel FORESTIER 2021-06-06 14:08:57 +02:00
parent f426457a6b
commit 4eba426270
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
sysctl.conf
View File

@ -63,6 +63,11 @@ kernel.pid_max = 4194304
# reboot machine after kernel panic
#kernel.panic = 10
# restrict perf subsystem usage
kernel.perf_event_paranoid = 2
kernel.perf_event_max_sample_rate = 1
kernel.perf_cpu_time_max_percent = 1
########## File System ##########
# disallow core dumping by SUID/SGID programs
@ -101,6 +106,9 @@ fs.inotify.max_user_watches = 524288
########## Virtualization ##########
# do not allow mmap in lower addresses
vm.mmap_min_addr = 65536
# improve mmap ASLR effectness
vm.mmap_rnd_bits=32
vm.mmap_rnd_compat_bits=16