Added exec-shield example.

svn-id: @4140

diff --git a/sysctl.conf b/sysctl.conf
index 4004a8c5e94d125069366d9d00b725b484150f11..7919579b3d3ea7ffe9cebb018192eb8d8ca6974a 100644 (file)
--- a/sysctl.conf
+++ b/sysctl.conf
@@ -181,3 +181,16 @@ kernel.sysrq = 1
 #kernel.grsecurity.stealth_udp = 0
 
 #kernel.grsecurity.coredump = 0
+
+#
+# Exec-Shield (kernel 2.6 only).
+#
+# Turn on randomization
+#kernel.exec-shield-randomize = 1
+#
+# exec-shield=0    - always-disabled
+# exec-shield=1    - default disabled, except binaries that enable it
+# exec-shield=2    - default enabled, except binaries that disable it
+# exec-shield=3    - always-enabled 
+#
+#kernel.exec-shield = 2