six
/
LWHP
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix "-e" for sysctl config.

master
six 2018-12-13 17:32:33 +01:00
parent 1e3b1a523c
commit bf695e1588
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
linux_hardening.txt
View File

@ -49,7 +49,7 @@ Kernel
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
- Sysctl hardening options - Sysctl hardening options
echo '''kernel.dmesg_restrict=1\nkernel.kptr_restrict=1\nkernel.kexec_load_disabled=1\nkernel.yama.ptrace_scope=1\nuser.max_user_namespaces=0''' >> /etc/sysctl.conf echo -e '''kernel.dmesg_restrict=1\nkernel.kptr_restrict=1\nkernel.kexec_load_disabled=1\nkernel.yama.ptrace_scope=1\nuser.max_user_namespaces=0''' >> /etc/sysctl.conf