Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-10-11 15:48:33 -04:00
Code Issues Projects Releases Packages Wiki Activity

Update comments

Browse source
This commit is contained in:
Raja Grewal 2023-05-16 02:11:44 +10:00
parent c921d4e915
commit cf003dfad8
No known key found for this signature in database
GPG key ID: 9174FEF3D2A84422
2 changed files with 8 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
etc/sysctl.d/30_security-misc.conf
View file

@ -36,6 +36,14 @@ net.core.bpf_jit_harden=2
## https://kernsec.org/wiki/index.php/Bug_Classes/Kernel_pointer_leak
kernel.kptr_restrict=2
## Improves ASLR effectiveness for mmap.
## Both explicit sysctl are made redundant due to automation
## https://forums.whonix.org/t/automate-mmap-randomisation-to-fix-ppc64el/16514
## Do NOT enable either - displaying only for clarity
##
#vm.mmap_rnd_bits=32
#vm.mmap_rnd_compat_bits=16
## Restricts the use of ptrace to root. This might break some programs running under WINE.
## A workaround for WINE would be to give the wineserver and wine-preloader ptrace capabilities. This can be done by running:
##