Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-10-01 08:25:45 -04:00
Code Issues Packages Projects Releases Wiki Activity

Remove obsolete #net.ipv4.tcp_fack=0

Browse Source
This commit is contained in:
Raja Grewal 2024-07-17 23:35:25 +10:00
parent 0da22c2031
commit 1087387b36
No known key found for this signature in database
GPG Key ID: 92CA473C156B64C4
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
usr/lib/sysctl.d/990-security-misc.conf
View File

@ -297,10 +297,9 @@ net.ipv6.conf.default.accept_source_route=0
net.ipv6.conf.all.accept_ra=0 net.ipv6.conf.all.accept_ra=0
net.ipv6.conf.default.accept_ra=0 net.ipv6.conf.default.accept_ra=0
## Disable SACK, DSACK, and FACK. ## Disable SACK and DSACK.
## Select acknowledgements (SACKs) are a known common vector of exploitation. ## Select acknowledgements (SACKs) are a known common vector of exploitation.
## Duplicate select acknowledgements (DSACKs) are an extension of SACK. ## Duplicate select acknowledgements (DSACKs) are an extension of SACK.
## Forward acknowledgements (FACKs) are a legacy option that will (eventually) be deprecated.
## Disabling can cause severe connectivity issues on networks with high latency or packet loss. ## Disabling can cause severe connectivity issues on networks with high latency or packet loss.
## Enabling on stable high-bandwidth networks can lead to reduced efficiency of TCP connections. ## Enabling on stable high-bandwidth networks can lead to reduced efficiency of TCP connections.
## ##
@ -315,7 +314,6 @@ net.ipv6.conf.default.accept_ra=0
## ##
#net.ipv4.tcp_sack=0 #net.ipv4.tcp_sack=0
#net.ipv4.tcp_dsack=0 #net.ipv4.tcp_dsack=0
#net.ipv4.tcp_fack=0
## Disable TCP timestamps to limit device fingerprinting via system time. ## Disable TCP timestamps to limit device fingerprinting via system time.
## ##