From bee11d02f77f543b8d0cc0f91f36a847efd2eebb Mon Sep 17 00:00:00 2001 From: Riyaz Faizullabhoy Date: Fri, 16 Dec 2016 09:24:34 -0800 Subject: [PATCH] Only disable sysrq for cloud editions Signed-off-by: Riyaz Faizullabhoy --- alpine/etc/sysctl.d/02-lynis.conf | 1 - alpine/etc/sysctl.d/cloud/security.conf | 3 ++- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/alpine/etc/sysctl.d/02-lynis.conf b/alpine/etc/sysctl.d/02-lynis.conf index 2a1c0230f..276150e1e 100644 --- a/alpine/etc/sysctl.d/02-lynis.conf +++ b/alpine/etc/sysctl.d/02-lynis.conf @@ -1,5 +1,4 @@ kernel.kptr_restrict = 2 -kernel.sysrq = 0 net.ipv4.conf.all.send_redirects = 0 net.ipv4.conf.default.accept_redirects = 0 net.ipv4.conf.default.accept_source_route = 0 diff --git a/alpine/etc/sysctl.d/cloud/security.conf b/alpine/etc/sysctl.d/cloud/security.conf index 6c3a406bf..248489374 100644 --- a/alpine/etc/sysctl.d/cloud/security.conf +++ b/alpine/etc/sysctl.d/cloud/security.conf @@ -1 +1,2 @@ -kernel.modules_disabled=1 \ No newline at end of file +kernel.modules_disabled=1 +kernel.sysrq = 0 \ No newline at end of file