16 lines
458 B
Plaintext
16 lines
458 B
Plaintext
|
# These are hardening options that users should typically not be altering.
|
||
|
|
# User-alterable options are in 10-void-user.conf.
|
||
|
|
|
||
|
|
# Append the PID to the core filename
|
||
|
|
kernel.core_uses_pid=1
|
||
|
|
|
||
|
|
# Enable hard and soft link protection
|
||
|
|
fs.protected_hardlinks=1
|
||
|
|
fs.protected_symlinks=1
|
||
|
|
|
||
|
|
# Try to keep kernel address exposures out of various /proc files (kallsyms, modules, etc).
|
||
|
|
kernel.kptr_restrict=1
|
||
|
|
|
||
|
|
# Block non-uid-0 kernel profiling
|
||
|
|
kernel.perf_event_paranoid=2
|