]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blob - config/etc/sysctl-x86_64.conf
sysctl.conf: Turn on BPF JIT hardening, if the JIT is enabled
[people/pmueller/ipfire-2.x.git] / config / etc / sysctl-x86_64.conf
1 # Improve KASLR effectiveness for mmap
2 vm.mmap_rnd_bits = 32
3 vm.mmap_rnd_compat_bits = 16
4
5 # Turn on BPF JIT hardening, if the JIT is enabled.
6 net.core.bpf_jit_harden = 2