Patrick Schleizer
2020-04-08 21:04:02 +00:00
parent 642d4d8d93
commit 565ff136e5
2 changed files with 11 additions and 1 deletions

5
debian/control vendored
View File

@ -15,7 +15,7 @@ Package: security-misc
Architecture: all
Depends: python3, libglib2.0-bin, libpam-runtime, sudo, adduser, libcap2-bin,
apparmor-profile-dist, helper-scripts, ${misc:Depends}
Replaces: tcp-timestamps-disable, anon-gpg-tweaks
Replaces: tcp-timestamps-disable, anon-gpg-tweaks, swappiness-lowest
Description: enhances misc security settings
Inspired by Kernel Self Protection Project (KSPP)
.
@ -280,6 +280,9 @@ Description: enhances misc security settings
`/etc/systemd/system/emergency.service.d/override.conf`
`/etc/systemd/system/rescue.service.d/override.conf`
.
Let the kernel only swap if it is absolutely necessary.
`/etc/sysctl.d/30_security-misc.conf`
.
Disables TCP Time Stamps:
.
TCP time stamps (RFC 1323) allow for tracking clock