Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-10-01 08:25:45 -04:00
Code Issues Packages Projects Releases Wiki Activity

enforce default kernel.randomize_va_space

Browse Source
This commit is contained in:
Raja Grewal 2022-07-13 04:28:03 +10:00
parent 1b287a6430
commit dabcaf22e1
No known key found for this signature in database
GPG Key ID: E34A5801947020A5
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
etc/sysctl.d/30_security-misc.conf
View File

@ -60,6 +60,8 @@ kernel.yama.ptrace_scope=2
## Prevent setuid processes from creating coredumps. ## Prevent setuid processes from creating coredumps.
fs.suid_dumpable=0 fs.suid_dumpable=0
## Randomize the addresses for mmap base, heap, stack, and VDSO pages
kernel.randomize_va_space=2
#### meta start #### meta start
#### project Kicksecure #### project Kicksecure
@ -157,4 +159,3 @@ kernel.perf_event_paranoid=3
# Do not accept router advertisments # Do not accept router advertisments
net.ipv6.conf.all.accept_ra=0 net.ipv6.conf.all.accept_ra=0
net.ipv6.conf.default.accept_ra=0 net.ipv6.conf.default.accept_ra=0