Merge pull request #980 from justincormack/sysctl-rational

Combine sysctl configs
This commit is contained in:
Justin Cormack 2017-01-10 16:08:15 +00:00 committed by GitHub
commit 495dcf63c5
3 changed files with 11 additions and 9 deletions

View File

@ -1,3 +1,4 @@
# general limits
vm.max_map_count = 262144
vm.overcommit_memory = 1
net.core.somaxconn = 1024
@ -7,4 +8,13 @@ net.ipv4.neigh.default.gc_thresh3 = 32768
fs.aio-max-nr = 1048576
fs.inotify.max_user_watches = 524288
fs.file-max = 524288
kernel.random.write_wakeup_threshold = 3072
# for rngd
kernel.random.write_wakeup_threshold = 3072
# security restrictions
kernel.kptr_restrict = 2
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.default.accept_source_route = 0
net.ipv6.conf.all.accept_redirects = 0
net.ipv6.conf.default.accept_redirects = 0
kernel.perf_event_paranoid = 3

View File

@ -1,6 +0,0 @@
kernel.kptr_restrict = 2
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.default.accept_source_route = 0
net.ipv6.conf.all.accept_redirects = 0
net.ipv6.conf.default.accept_redirects = 0

View File

@ -1,2 +0,0 @@
kernel.perf_event_paranoid = 3
kernel.yama.ptrace_scope = 1