Update control

This commit is contained in:
madaidan 2019-12-05 20:14:55 +00:00 committed by GitHub
parent 30289c68c2
commit af9e19c51f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

5
debian/control vendored
View File

@ -43,8 +43,9 @@ Description: enhances misc security settings
* The TCP/IP stack is hardened by disabling ICMP redirect acceptance, * The TCP/IP stack is hardened by disabling ICMP redirect acceptance,
ICMP redirect sending and source routing to prevent man-in-the-middle attacks, ICMP redirect sending and source routing to prevent man-in-the-middle attacks,
ignoring all ICMP requests, enabling TCP syncookies to prevent SYN flood ignoring all ICMP requests, enabling TCP syncookies to prevent SYN flood
attacks and enabling RFC1337 to protect against time-wait assassination attacks, enabling RFC1337 to protect against time-wait assassination
attacks. attacks and enabling reverse path filtering to prevent IP spoofing and
mitigate vulnerabilities such as CVE-2019-14899.
. .
* Some data spoofing attacks are made harder. * Some data spoofing attacks are made harder.
. .