The sysctl from k4yt3x

sysctl's People

Contributors

Stargazers

Watchers

sysctl's Issues

Set `tcp_base_mss` while enabling the MTU probing.

Set tcp_base_mss while enabling the MTU probing.

Refer to: https://blog.cloudflare.com/path-mtu-discovery-in-practice/

About "kernel.pid_max" and "fs.file-max"

I found this file shipped with Ubuntu Focal.

* Applying /usr/lib/sysctl.d/50-pid-max.conf ...
kernel.pid_max = 4194304

It seems like if we configure this parameter here like:

sysctl/sysctl.conf

Lines 57 to 58 in abb9f9f

 # allow for more PIDs 

 kernel.pid_max = 65536

, we are actually decrease the max allowed PID rather than allow for more PIDs

Related PR: #3

Suggest to rename `sysctl.conf`

As this file can usually be found shipped with Linux distribution, it may not be good to replace it.
As kernel configuration files are loaded in dictionary order, we can write our kernel harden configuration to file like z_kernel-hardening_by_k4yt3x.conf.

P.S. I would use sysctl --system rather than sysctl -p to load kernel configuration.

Usage:
 sysctl [options] [variable[=value] ...]

Options:
  -a, --all            display all variables
  -A                   alias of -a
  -X                   alias of -a
      --deprecated     include deprecated parameters to listing
  -b, --binary         print value without new line
  -e, --ignore         ignore unknown variables errors
  -N, --names          print variable names without values
  -n, --values         print only values of the given variable(s)
  -p, --load[=<file>]  read values from file
  -f                   alias of -p
      --system         read values from all system directories
  -r, --pattern <expression>
                       select setting that match expression
  -q, --quiet          do not echo variable set
  -w, --write          enable writing a value to variable
  -o                   does nothing
  -x                   does nothing
  -d                   alias of -h

 -h, --help     display this help and exit
 -V, --version  output version information and exit

For more details see sysctl(8).

Recommend Projects