security-misc/etc/initramfs-tools/scripts/init-bottom/sysctl-initramfs

#!/bin/sh

## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.

PREREQ=""
prereqs()
{
        echo "$PREREQ"
}
case $1 in
prereqs)
        prereqs
        exit 0
        ;;
esac

## Write to '/run/initramfs' folder.
## https://forums.whonix.org/t/kernel-hardening/7296/435

sysctl -p ${rootmnt}/etc/sysctl.conf >/dev/null 2> "/run/initramfs/sysctl-initramfs-error.log"
sysctl -p ${rootmnt}/etc/sysctl.d/*.conf >/dev/null 2>> "/run/initramfs/sysctl-initramfs-error.log"

grep -v "unprivileged_userfaultfd" "/run/initramfs/sysctl-initramfs-error.log"

true