mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-02-13 13:21:38 -05:00
12 lines
481 B
Plaintext
12 lines
481 B
Plaintext
## Copyright (C) 2012 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
|
|
## See the file COPYING for copying conditions.
|
|
|
|
## Conntrack:
|
|
## Disable Netfilter's automatic connection tracking helper assignment.
|
|
## Increases kernel attack surface by enabling superfluous functionality such as IRC parsing in the kernel.
|
|
##
|
|
## https://conntrack-tools.netfilter.org/manual.html
|
|
## https://forums.whonix.org/t/disable-conntrack-helper/18917
|
|
##
|
|
options nf_conntrack nf_conntrack_helper=0
|