cullmann/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

harden some stuff

Browse source
This commit is contained in:
Christoph Cullmann 2025-03-30 17:40:04 +02:00
parent 5d515c04b3
commit 5fe8aa27ae
No known key found for this signature in database
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
share/common.nix
View file

@ -68,6 +68,10 @@ in
"kernel.kptr_restrict" = 2; "kernel.kptr_restrict" = 2;
"kernel.unprivileged_bpf_disabled" = 1; "kernel.unprivileged_bpf_disabled" = 1;
"net.core.bpf_jit_harden" = 2; "net.core.bpf_jit_harden" = 2;
"net.ipv4.conf.all.accept_redirects" = false;
"net.ipv4.conf.default.accept_redirects" = false;
"net.ipv6.conf.all.accept_redirects" = false;
"net.ipv6.conf.default.accept_redirects" = false;
}; };
# blacklist some stuff # blacklist some stuff