- added grsec stuff

- really, really disable ipv6 autoconf if one wants it

svn-id: @946

diff --git a/sysctl.conf b/sysctl.conf
index 90ac575624026003f80134c608ac454ba3d3d6a9..437415e35fcf57ab9b3c7f0ca4fe8a4c09c8a856 100644 (file)
--- a/sysctl.conf
+++ b/sysctl.conf
@@ -98,6 +98,7 @@ net.ipv6.conf.all.forwarding = 0
 
 # Do you want IPv6 address autoconfiguration? Kernel default is yes.
 # net.ipv6.conf.all.autoconf = 0
+# net.ipv6.conf.default.autoconf = 0
 
 # Do you want kernel to add default route for IPv6 interfaces if
 # there is no router on the link? Kernel default is yes.
@@ -117,3 +118,56 @@ net.ipv6.conf.all.forwarding = 0
 
 # Enable the magic-sysrq key
 kernel.sysrq = 1
+
+#
+# GETREWTED http://www.getrewted.org
+# kernel 2.4 only
+#
+# WARNING!
+# These values are SET ONCE!
+#
+#kernel.getrewted.linking_restrictions = 1
+#kernel.getrewted.fifo_restrictions = 1
+#kernel.getrewted.secure_fds = 1
+#kernel.getrewted.chroot_restrictions = 1
+#kernel.getrewted.chroot_execlog = 0
+#kernel.getrewted.chroot_caps = 0
+#kernel.getrewted.secure_kbmap = 0
+
+#kernel.getrewted.exec_logging = 0
+#kernel.getrewted.suid_logging = 0
+#kernel.getrewted.signal_logging = 1
+#kernel.getrewted.forkfail_logging = 0
+#kernel.getrewted.timechange_logging = 1
+
+#kernel.getrewted.execve_limiting = 1
+#kernel.getrewted.fork_bomb_prot = 0
+#kernel.getrewted.fork_bomb_gid = 65504
+#kernel.getrewted.fork_bomb_sec = 40
+#kernel.getrewted.fork_bomb_max = 20
+#kernel.getrewted.tpe = 0
+#kernel.getrewted.tpe_gid = 65500
+#kernel.getrewted.tpe_glibc = 0
+#kernel.getrewted.tpe_restrict_all = 0
+
+#kernel.getrewted.rand_pids = 0
+#kernel.getrewted.rand_ip_ids = 0
+#kernel.getrewted.rand_tcp_src_ports = 0
+#kernel.getrewted.altered_pings = 0
+#kernel.getrewted.rand_ttl = 0
+#kernel.getrewted.rand_ttl_thresh = 64
+#kernel.getrewted.rand_net = 1
+#kernel.getrewted.socket_all = 1
+#kernel.getrewted.socket_all_gid = 65501
+#kernel.getrewted.socket_client = 1
+#kernel.getrewted.socket_client_gid = 65502
+#kernel.getrewted.socket_server = 1
+#kernel.getrewted.socket_server_gid = 65503
+
+#kernel.getrewted.stealth_flags = 0
+#kernel.getrewted.stealth_icmp = 0
+#kernel.getrewted.stealth_igmp = 0
+#kernel.getrewted.stealth_rst = 0
+#kernel.getrewted.stealth_udp = 0
+
+#kernel.getrewted.coredump = 0