From: Alexander Popov <alex.popov@linux.com>
Date: Thu, 22 Aug 2019 10:34:49 +0000 (+0300)
Subject: Add some new sysctls (to remember them)
X-Git-Tag: v0.5.2~6
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=94a1a16b8115079117385630c7c91580b092715a;p=kconfig-hardened-check.git

Add some new sysctls (to remember them)
---

diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py
index a7a7d9c..10c2997 100755
--- a/kconfig-hardened-check.py
+++ b/kconfig-hardened-check.py
@@ -32,9 +32,13 @@
 #           kpti=on
 #           ssbd=force-on
 #
-# N.B. Hardening sysctl's:
-#    net.core.bpf_jit_harden
+# N.B. Hardening sysctls:
+#    net.core.bpf_jit_harden=2
 #    kptr_restrict=2
+#    vm.unprivileged_userfaultfd=0
+#    kernel.perf_event_paranoid=3
+#    kernel.yama.ptrace_scope=1
+#    kernel.unprivileged_bpf_disabled=1
 
 import sys
 from argparse import ArgumentParser