Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-06-02 13:35:12 -04:00
Code Issues Projects Releases Packages Wiki Activity

disable io_uring without CAP_SYS_ADMIN or io_uring group

Browse source
This commit is contained in:
Daniel Micay 2024-07-01 23:11:17 -04:00
parent 6e6957876e
commit 01201c0ece
2 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
sysctl.d/local.conf
View file

@ -53,6 +53,9 @@ kernel.unprivileged_userns_clone = 0
kernel.unprivileged_bpf_disabled = 1
net.core.bpf_jit_harden = 2
kernel.io_uring_disabled = 1
kernel.io_uring_group = 2000
kernel.kexec_load_disabled = 1
fs.protected_regular = 2