harden some stuff

This commit is contained in:
Christoph Cullmann 2025-03-30 17:36:27 +02:00
parent 98bfe91812
commit 16a3b77766
No known key found for this signature in database

View file

@ -62,6 +62,8 @@ in
"kernel.perf_event_mlock_kb" = 16777216;
# harden some stuff
"dev.tty.ldisc_autoload" = 0;
"fs.suid_dumpable" = 0;
"kernel.sysrq" = 0;
"kernel.kptr_restrict" = 2;
"kernel.unprivileged_bpf_disabled" = 1;