2021-10-19 08:39:56 +00:00
|
|
|
# These defaults are from upstream and are not patched into systemd like in el8
|
2021-10-05 07:52:23 +00:00
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1689346
|
|
|
|
|
kernel.kptr_restrict = 1
|
|
|
|
|
|
|
|
|
|
# Source route verification
|
|
|
|
|
net.ipv4.conf.default.rp_filter = 1
|
|
|
|
|
net.ipv4.conf.*.rp_filter = 1
|
|
|
|
|
-net.ipv4.conf.all.rp_filter
|
