diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2018-01-07 22:03:52 -0200 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2018-01-07 22:03:52 -0200 |
| commit | de1b5d25df831afb47cf35f49bc9b495b936cd55 (patch) | |
| tree | d846821c25319845d13e0832f2068759ffd3ea21 /share/provision | |
| parent | 465e842486ca610c2a507f790c7f9e17a8c34cf3 (diff) | |
| download | kvmx-de1b5d25df831afb47cf35f49bc9b495b936cd55.tar.gz kvmx-de1b5d25df831afb47cf35f49bc9b495b936cd55.tar.bz2 | |
Provision: set kernel.unprivileged_bpf_disabled=1
Diffstat (limited to 'share/provision')
| -rwxr-xr-x | share/provision/development | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/share/provision/development b/share/provision/development index 0b477df..5c2ccdb 100755 --- a/share/provision/development +++ b/share/provision/development @@ -29,6 +29,10 @@ APT_INSTALL="sudo LC_ALL=C DEBIAN_FRONTEND=noninteractive apt-get install -y" # Ensure we're in the home folder cd +# Security +sudo sysctl kernel.unprivileged_bpf_disabled=1 +echo "kernel.unprivileged_bpf_disabled=1" | sudo tee /etc/sysctl.d/kernel.unprivileged_bpf_disabled.conf > /dev/null + # Configuring APT $APT_INSTALL apt-transport-https || exit 1 sudo sed -i -e "s|http://http.debian.net|https://deb.debian.org|g" /etc/apt/sources.list || exit 1 |