mirror of
https://github.com/k4yt3x/sysctl.git
synced 2025-12-17 17:56:47 +00:00
docs(readme): add AppArmor and disable IPv6 boot options
Signed-off-by: k4yt3x <i@k4yt3x.com>
This commit is contained in:
parent
ea0cfb032a
commit
55becbef22
@ -201,4 +201,11 @@ lockdown=confidentiality
|
|||||||
# Enforce kernel module signature verification
|
# Enforce kernel module signature verification
|
||||||
# Only allow signed kernel modules to be loaded
|
# Only allow signed kernel modules to be loaded
|
||||||
modules.sig_enforce=1
|
modules.sig_enforce=1
|
||||||
|
|
||||||
|
# Enable AppArmor
|
||||||
|
apparmor=1
|
||||||
|
security=apparmor
|
||||||
|
|
||||||
|
# Completely disable IPv6
|
||||||
|
ipv6.disable=1
|
||||||
```
|
```
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user