scottk/secureblue
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/secureblue.git synced 2025-11-07 22:03:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add warning about removing userns setting

Browse Source
This commit is contained in:
qoijjj
2023-12-04 18:25:44 -08:00
parent 25ac909ef8
commit dadc1ece43
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
config/files/usr/etc/sysctl.d/hardening.conf
View File

@@ -28,6 +28,9 @@ fs.protected_fifos = 2
dev.tty.ldisc_autoload = 0 dev.tty.ldisc_autoload = 0
# Disables user namespaces
# DO NOT REMOVE
# https://github.com/containers/bubblewrap/security/advisories/GHSA-j2qp-rvxj-43vj
user.max_user_namespaces = 0 user.max_user_namespaces = 0
kernel.unprivileged_userns_clone = 0 kernel.unprivileged_userns_clone = 0