From fb2b1eeea6dbc07cb477258c477928780de42210 Mon Sep 17 00:00:00 2001 From: IMTheNachoMan Date: Tue, 12 Feb 2019 21:48:49 -0500 Subject: [PATCH] Update and rename sysctl.md to linux kernel sysctl hardening.md --- sysctl.md => linux kernel sysctl hardening.md | 27 ++++++++++++++++--- 1 file changed, 24 insertions(+), 3 deletions(-) rename sysctl.md => linux kernel sysctl hardening.md (93%) diff --git a/sysctl.md b/linux kernel sysctl hardening.md similarity index 93% rename from sysctl.md rename to linux kernel sysctl hardening.md index 64cb294..38c95e5 100644 --- a/sysctl.md +++ b/linux kernel sysctl hardening.md @@ -1,10 +1,31 @@ -# Linux Kernel `sysctl` Settings +# Linux Kernel `sysctl` Hardening + +## Table of Contents + +- [Overview](#overview) +- [Disclaimer](#disclaimer) +- [Keys](#keys) + - [Table View](#table-view) + - [Flat File View](#flat-file-view) ## Overview +This is a combined list of all the `sysctl` hardening recommendations I could find across multiple sites: + +- https://www.cyberciti.biz/faq/linux-kernel-etcsysctl-conf-security-hardening/ +- https://geektnt.com/sysctl-conf-hardening.html +- https://linoxide.com/how-tos/linux-server-protection/ +- https://cloudpro.zone/index.php/2018/01/30/debian-9-3-server-setup-guide-part-5/ + Documentation for **most** of these keys can be found at https://github.com/torvalds/linux/blob/master/Documentation. -## Table +## Disclaimer + +I do not know what most of these settings do. This list is being provided just as reference material. I take no responsibility for them, what they do, or any issues/damage they do or may cause. + +## Keys + +### Table View |`key=value`|Note|[Documentation| |--|--|--| @@ -65,7 +86,7 @@ Documentation for **most** of these keys can be found at https://github.com/torv |`net.ipv6.conf.default.max_addresses = 1`||[/networking/ip-sysctl.txt](https://github.com/torvalds/linux/blob/master/Documentation/networking/ip-sysctl.txt)| |`net.ipv6.conf.default.router_solicitations = 0`||[/networking/ip-sysctl.txt](https://github.com/torvalds/linux/blob/master/Documentation/networking/ip-sysctl.txt)| -## Flat File +### Flat File View ### # start from https://github.com/imthenachoman/How-To-Secure-A-Linux-Server/