luzifer-arch/luzifer
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Resolve cnspec warnings for ICMP redirects

Browse source 
Signed-off-by: Knut Ahlers <knut@ahlers.me>
This commit is contained in:
Knut Ahlers 2024-08-28 18:41:29 +02:00
parent 3046b3d428
commit 75d7af83ce
Signed by: luzifer
SSH key fingerprint: SHA256:/xtE5lCgiRDQr8SLxHMS92ZBlACmATUmF1crK16Ks4E
2 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
PKGBUILD
View file

@ -7,7 +7,7 @@ pkgname=(
luzifer-gui luzifer-gui
luzifer-lenovo-gui luzifer-lenovo-gui
) )
pkgver=0.11.0 pkgver=0.11.1
pkgrel=1 pkgrel=1
pkgdesc='System configuration for @luzifer systems' pkgdesc='System configuration for @luzifer systems'
arch=(any) arch=(any)

10
base/usr/share/luzifer/base-setup/files/sysctl.conf
View file

@ -8,3 +8,13 @@ net.ipv4.conf.default.rp_filter = 1
# CNSPEC: Ensure core dumps are restricted # CNSPEC: Ensure core dumps are restricted
fs.suid_dumpable = 0 fs.suid_dumpable = 0
# CNSPEC: Ensure ICMP redirects are not accepted
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv6.conf.all.accept_redirects = 0
net.ipv6.conf.default.accept_redirects = 0
# CNSPEC: Ensure secure ICMP redirects are not accepted
net.ipv4.conf.all.secure_redirects = 0
net.ipv4.conf.default.secure_redirects = 0