Skip to content

K
kernel-hardening-checker
Commit 4d5de996 by Alexander Popov
Options

Add a comment about `kernel.unprivileged_userns_clone` sysctl in Debian

parent 5d9e4f83
Showing with 1 additions and 1 deletions
kconfig_hardened_check/checks.py
...@@ -16,7 +16,7 @@ This module contains knowledge for checks. ...@@ -16,7 +16,7 @@ This module contains knowledge for checks.
# kernel.perf_event_paranoid=2 (or 3 with a custom patch, see https://lwn.net/Articles/696216/) # kernel.perf_event_paranoid=2 (or 3 with a custom patch, see https://lwn.net/Articles/696216/)
# kernel.kexec_load_disabled=1 # kernel.kexec_load_disabled=1
# kernel.yama.ptrace_scope=3 # kernel.yama.ptrace_scope=3
# user.max_user_namespaces=0 # user.max_user_namespaces=0 (for Debian, also see kernel.unprivileged_userns_clone)
# what about bpf_jit_enable? # what about bpf_jit_enable?
# kernel.unprivileged_bpf_disabled=1 # kernel.unprivileged_bpf_disabled=1
# net.core.bpf_jit_harden=2 # net.core.bpf_jit_harden=2
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment