Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-10-01 00:55:42 -04:00
Code Issues Packages Projects Releases Wiki Activity

disable unprivileged userns for regular kernels

Browse Source
This commit is contained in:
Daniel Micay 2021-09-07 22:50:57 -04:00
parent 87db85274a
commit 5eead0ad5a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
local.conf
View File

@ -20,6 +20,8 @@ vm.mmap_rnd_compat_bits = 16
kernel.kptr_restrict = 2 kernel.kptr_restrict = 2
kernel.unprivileged_userns_clone = 0
kernel.unprivileged_bpf_disabled = 1 kernel.unprivileged_bpf_disabled = 1
net.core.bpf_jit_harden = 2 net.core.bpf_jit_harden = 2