Add sysctl changes as suggested by lynis

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
This commit is contained in:
Riyaz Faizullabhoy 2016-11-30 10:47:06 -08:00
parent b0fdca348b
commit 0eefa15623

View File

@ -0,0 +1,7 @@
kernel.kptr_restrict = 2
kernel.sysrq = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.default.accept_source_route = 0
net.ipv6.conf.all.accept_redirects = 0
net.ipv6.conf.default.accept_redirects = 0