Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-04-27 19:16:08 -04:00
Code Issues Packages Projects Releases Wiki Activity

undo Disabling TCP SACK, DSACK, FACK

Browse Source 
https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109/5
This commit is contained in:
Patrick Schleizer 2019-10-05 07:00:47 -04:00
parent c19942f72b
commit 5fb4eb8e56
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
3 changed files with 3 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
debian/control vendored
View File

@ -43,8 +43,6 @@ Description: enhances misc security settings
* The TCP/IP stack is hardened. * The TCP/IP stack is hardened.
. .
* This package makes some data spoofing attacks harder. * This package makes some data spoofing attacks harder.
.
* SACK is disabled as it is commonly exploited and is rarely used.
. .
* This package disables the merging of slabs of similar sizes to prevent an * This package disables the merging of slabs of similar sizes to prevent an
attacker from exploiting them. attacker from exploiting them.

3
debian/security-misc.maintscript vendored
View File

@ -8,3 +8,6 @@ rm_conffile /etc/default/grub.d/40_only_allow_signed_modules.cfg
## https://forums.whonix.org/t/sysrq-magic-sysrq-key/8079 ## https://forums.whonix.org/t/sysrq-magic-sysrq-key/8079
rm_conffile /etc/sysctl.d/sysrq.conf rm_conffile /etc/sysctl.d/sysrq.conf
## https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109/5
rm_conffile /etc/sysctl.d/tcp_sack.conf

5
etc/sysctl.d/tcp_sack.conf
View File

@ -1,5 +0,0 @@
# Disables SACK as it is commonly exploited and likely not needed.
# https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109
net.ipv4.tcp_sack=0
net.ipv4.tcp_dsack=0
net.ipv4.tcp_fack=0