diff --git a/usr/lib/sysctl.d/990-security-misc.conf b/usr/lib/sysctl.d/990-security-misc.conf index 39d0539..ba33bae 100644 --- a/usr/lib/sysctl.d/990-security-misc.conf +++ b/usr/lib/sysctl.d/990-security-misc.conf @@ -275,6 +275,8 @@ net.ipv6.conf.default.accept_redirects=0 ## Accept ICMP redirect messages only for approved gateways. ## If ICMP redirect messages are permitted, only useful if managing a default gateway list. ## +## https://github.com/Kicksecure/security-misc/pull/248 +## net.ipv4.conf.all.secure_redirects=1 net.ipv4.conf.default.secure_redirects=1