[thirdparty/systemd.git] / sysctl.d / 50-default.conf

#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

# See sysctl.d(5) and core(5) for documentation.

# To override settings in this file, create a local file in /etc
# (e.g. /etc/sysctl.d/90-override.conf), and put any assignments
# there.

# System Request functionality of the kernel (SYNC)
#
# Use kernel.sysrq = 1 to allow all keys.
# See https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html for a list
# of values and keys.
kernel.sysrq = 16

# Append the PID to the core filename
kernel.core_uses_pid = 1

# Source route verification
net.ipv4.conf.all.rp_filter = 1

# Do not accept source routing
net.ipv4.conf.all.accept_source_route = 0

# Promote secondary addresses when the primary address is removed
net.ipv4.conf.all.promote_secondaries = 1

# Fair Queue CoDel packet scheduler to fight bufferbloat
net.core.default_qdisc = fq_codel

# Enable hard and soft link protection
fs.protected_hardlinks = 1
fs.protected_symlinks = 1
Commit	Line	Data
	1	# This file is part of systemd.
	2	#
	3	# systemd is free software; you can redistribute it and/or modify it
	4	# under the terms of the GNU Lesser General Public License as published by
	5	# the Free Software Foundation; either version 2.1 of the License, or
	6	# (at your option) any later version.
	7
	8	# See sysctl.d(5) and core(5) for documentation.
	9
	10	# To override settings in this file, create a local file in /etc
	11	# (e.g. /etc/sysctl.d/90-override.conf), and put any assignments
	12	# there.
	13
	14	# System Request functionality of the kernel (SYNC)
	15	#
	16	# Use kernel.sysrq = 1 to allow all keys.
	17	# See https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html for a list
	18	# of values and keys.
	19	kernel.sysrq = 16
	20
	21	# Append the PID to the core filename
	22	kernel.core_uses_pid = 1
	23
	24	# Source route verification
	25	net.ipv4.conf.all.rp_filter = 1
	26
	27	# Do not accept source routing
	28	net.ipv4.conf.all.accept_source_route = 0
	29
	30	# Promote secondary addresses when the primary address is removed
	31	net.ipv4.conf.all.promote_secondaries = 1
	32
	33	# Fair Queue CoDel packet scheduler to fight bufferbloat
	34	net.core.default_qdisc = fq_codel
	35
	36	# Enable hard and soft link protection
	37	fs.protected_hardlinks = 1
	38	fs.protected_symlinks = 1