sysctl.conf: Turn on BPF JIT hardening, if the JIT is enabled

[people/pmueller/ipfire-2.x.git] / config / etc / sysctl-aarch64.conf

diff --git a/config/etc/sysctl-aarch64.conf b/config/etc/sysctl-aarch64.conf
new file mode 100644 (file)
index 0000000..9f84080
--- /dev/null
+++ b/config/etc/sysctl-aarch64.conf
@@ -0,0 +1,2 @@
+# Turn on BPF JIT hardening, if the JIT is enabled.
+net.core.bpf_jit_harden = 2