]> git.ipfire.org Git - ipfire-2.x.git/commit
projects / ipfire-2.x.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5847a7d) | patch
sysctl.conf: Turn on BPF JIT hardening, if the JIT is enabled
authorPeter Müller <peter.mueller@ipfire.org>
Fri, 9 Apr 2021 19:13:52 +0000 (21:13 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Sat, 10 Apr 2021 13:16:28 +0000 (13:16 +0000)
commit45022af1b80270039d649cde6071fe30344ae443
treee96188becb8bc420da9a5b5df0cd88e9d6229721tree | snapshot
parent5847a7d01133a0ca7f5f6f096e24fa174f243510commit | diff
sysctl.conf: Turn on BPF JIT hardening, if the JIT is enabled

The second version of this patch splits this up into different
architecture-specific sysctl config files, as i586 does not support BPF
JIT, hence the net.core.bpf_jit_harden does not exist on that
architecture.

Fixes: #12384
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/etc/sysctl-aarch64.conf [new file with mode: 0644] blob
config/etc/sysctl-armv5tel.conf [new file with mode: 0644] blob
config/etc/sysctl-x86_64.conf diff | blob | blame | history
IPFire 2.x development tree