diff --git a/etc/sysctl.d/dmesg_restrict.conf b/etc/sysctl.d/dmesg_restrict.conf
new file mode 100644
index 0000000..789769d
--- /dev/null
+++ b/etc/sysctl.d/dmesg_restrict.conf
@@ -0,0 +1,2 @@
+# Restricts the kernel log to root only.
+kernel.dmesg_restrict=1