Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-08 22:08:34 -05:00
Code Issues Packages Projects Releases Wiki Activity

vm.swappiness=1

Browse Source 
import from swappiness-lowest

https://forums.whonix.org/t/vm-swappiness-1-set-swapiness-to-lowest-setting-still-useful-swappiness-lowest/9278
This commit is contained in:
Patrick Schleizer 2020-04-08 21:04:02 +00:00
parent 642d4d8d93
commit 565ff136e5
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
debian/control vendored
View File

@ -15,7 +15,7 @@ Package: security-misc
Architecture: all Architecture: all
Depends: python3, libglib2.0-bin, libpam-runtime, sudo, adduser, libcap2-bin, Depends: python3, libglib2.0-bin, libpam-runtime, sudo, adduser, libcap2-bin,
apparmor-profile-dist, helper-scripts, ${misc:Depends} apparmor-profile-dist, helper-scripts, ${misc:Depends}
Replaces: tcp-timestamps-disable, anon-gpg-tweaks Replaces: tcp-timestamps-disable, anon-gpg-tweaks, swappiness-lowest
Description: enhances misc security settings Description: enhances misc security settings
Inspired by Kernel Self Protection Project (KSPP) Inspired by Kernel Self Protection Project (KSPP)
. .
@ -280,6 +280,9 @@ Description: enhances misc security settings
`/etc/systemd/system/emergency.service.d/override.conf` `/etc/systemd/system/emergency.service.d/override.conf`
`/etc/systemd/system/rescue.service.d/override.conf` `/etc/systemd/system/rescue.service.d/override.conf`
. .
Let the kernel only swap if it is absolutely necessary.
`/etc/sysctl.d/30_security-misc.conf`
.
Disables TCP Time Stamps: Disables TCP Time Stamps:
. .
TCP time stamps (RFC 1323) allow for tracking clock TCP time stamps (RFC 1323) allow for tracking clock

7
etc/sysctl.d/30_security-misc.conf
View File

@ -139,3 +139,10 @@ dev.tty.ldisc_autoload=0
## ##
## https://duasynt.com/blog/linux-kernel-heap-spray ## https://duasynt.com/blog/linux-kernel-heap-spray
vm.unprivileged_userfaultfd=0 vm.unprivileged_userfaultfd=0
## Let the kernel only swap if it is absolutely necessary.
## Better not be set to zero:
## - https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Performance_Tuning_Guide/s-memory-tunables.html
## - https://en.wikipedia.org/wiki/Swappiness
vm.swappiness=1