aboutsummaryrefslogtreecommitdiff
path: root/srcpkgs/base-files/files/sysctl-user.conf
blob: 4fff32d3ce2edb2cd89d9f088b809b52cf883db6 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
# These are some recommended defaults that users can alter if needed.
# For example, developer systems may want to enable kexec for kernel
# testing, or disable the ptrace restrictions to be able to gdb attach
# to processes without root.

# Avoid kernel memory address exposures via dmesg.
kernel.dmesg_restrict=1

# Turn off kexec, even if it's built in.
kernel.kexec_load_disabled=1

# Avoid non-ancestor ptrace access to running processes and their credentials.
kernel.yama.ptrace_scope=1