blob: 1e1a2768d677471648a28737492e508f3b16beae (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
# These are hardening options that users should typically not be altering.
# User-alterable options are in 10-void-user.conf.
# Append the PID to the core filename
kernel.core_uses_pid = 1
# Enable hard and soft link protection
fs.protected_hardlinks=1
fs.protected_symlinks=1
# Try to keep kernel address exposures out of various /proc files (kallsyms, modules, etc).
kernel.kptr_restrict=1
# Block non-uid-0 kernel profiling
kernel.perf_event_paranoid=2
|