From 6f5c3cb9d8de46a99889f90de978b85cbb79f8f3 Mon Sep 17 00:00:00 2001 From: David Tardon Date: Dec 15 2020 09:45:43 +0000 Subject: set kptr_restrict=1 Resolves: #1689346 patch_name: 0290-set-kptr_restrict-1.patch present_in_specfile: true location_in_specfile: 290 squash_commits: true --- diff --git a/sysctl.d/50-default.conf b/sysctl.d/50-default.conf index e263cf0..e0afc9c 100644 --- a/sysctl.d/50-default.conf +++ b/sysctl.d/50-default.conf @@ -21,6 +21,9 @@ kernel.sysrq = 16 # Append the PID to the core filename kernel.core_uses_pid = 1 +# https://bugzilla.redhat.com/show_bug.cgi?id=1689346 +kernel.kptr_restrict = 1 + # Source route verification net.ipv4.conf.all.rp_filter = 1