diff --git a/sysctl.d/50-default.conf b/sysctl.d/50-default.conf
index e263cf0..e0afc9c 100644
--- a/sysctl.d/50-default.conf
+++ b/sysctl.d/50-default.conf
@@ -21,6 +21,9 @@ kernel.sysrq = 16
 # Append the PID to the core filename
 kernel.core_uses_pid = 1
 
+# https://bugzilla.redhat.com/show_bug.cgi?id=1689346
+kernel.kptr_restrict = 1
+
 # Source route verification
 net.ipv4.conf.all.rp_filter = 1