harden some stuff

This commit is contained in:
Christoph Cullmann 2025-03-30 17:43:27 +02:00
parent 5fe8aa27ae
commit 4dfee5afcc
No known key found for this signature in database

View file

@ -69,6 +69,7 @@ in
"kernel.unprivileged_bpf_disabled" = 1;
"net.core.bpf_jit_harden" = 2;
"net.ipv4.conf.all.accept_redirects" = false;
"net.ipv4.conf.all.send_redirects" = false;
"net.ipv4.conf.default.accept_redirects" = false;
"net.ipv6.conf.all.accept_redirects" = false;
"net.ipv6.conf.default.accept_redirects" = false;