diff --git a/etc/sysctl.d/fs_protected.conf b/etc/sysctl.d/fs_protected.conf
new file mode 100644
index 0000000..4e4117b
--- /dev/null
+++ b/etc/sysctl.d/fs_protected.conf
@@ -0,0 +1,3 @@
+# Makes some data spoofing attacks harder.
+fs.protected_fifos=2
+fs.protected_regular=2