9 lines
283 B
Plaintext
9 lines
283 B
Plaintext
# These defaults are from upstream and are not patched into systemd like in el8
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1689346
|
|
kernel.kptr_restrict = 1
|
|
|
|
# Source route verification
|
|
net.ipv4.conf.default.rp_filter = 1
|
|
net.ipv4.conf.*.rp_filter = 1
|
|
-net.ipv4.conf.all.rp_filter
|