anitazha / rpms / systemd

Forked from rpms/systemd 3 years ago
Clone
7e7c9f
From 7e8934693393c45ba76155088b01ad1ace9daeac Mon Sep 17 00:00:00 2001
7e7c9f
From: David Tardon <dtardon@redhat.com>
7e7c9f
Date: Tue, 3 Dec 2019 13:57:38 +0100
7e7c9f
Subject: [PATCH] set kptr_restrict=1
7e7c9f
7e7c9f
Resolves: #1689344
7e7c9f
---
7e7c9f
 sysctl.d/50-default.conf | 3 +++
7e7c9f
 1 file changed, 3 insertions(+)
7e7c9f
7e7c9f
diff --git a/sysctl.d/50-default.conf b/sysctl.d/50-default.conf
7e7c9f
index 44c48236cc..b1806502e8 100644
7e7c9f
--- a/sysctl.d/50-default.conf
7e7c9f
+++ b/sysctl.d/50-default.conf
7e7c9f
@@ -20,6 +20,9 @@ kernel.sysrq = 16
7e7c9f
 # Append the PID to the core filename
7e7c9f
 kernel.core_uses_pid = 1
7e7c9f
 
7e7c9f
+# https://bugzilla.redhat.com/show_bug.cgi?id=1689344
7e7c9f
+kernel.kptr_restrict = 1
7e7c9f
+
7e7c9f
 # Source route verification
7e7c9f
 net.ipv4.conf.default.rp_filter = 1
7e7c9f
 net.ipv4.conf.all.rp_filter = 1