blob: fa70767ef372650f92b74905a6d8e8d9701e6940 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
# These are some recommended defaults that users can alter if needed.
# For example, developer systems may want to enable kexec for kernel
# testing, or disable the ptrace restrictions to be able to gdb attach
# to processes without root.
#
# To replace, create a file of the same name in /etc/sysctl.d.
# Avoid kernel memory address exposures via dmesg.
kernel.dmesg_restrict=1
# Turn off kexec, even if it's built in.
kernel.kexec_load_disabled=1
# Avoid non-ancestor ptrace access to running processes and their credentials.
kernel.yama.ptrace_scope=1
|