]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blame - config/etc/sysctl-x86_64.conf
sysctl.conf: Turn on BPF JIT hardening, if the JIT is enabled
[people/pmueller/ipfire-2.x.git] / config / etc / sysctl-x86_64.conf
CommitLineData
10dd2afd
AF
1# Improve KASLR effectiveness for mmap
2vm.mmap_rnd_bits = 32
3vm.mmap_rnd_compat_bits = 16
45022af1
PM
4
5# Turn on BPF JIT hardening, if the JIT is enabled.
6net.core.bpf_jit_harden = 2