diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2016-09-10 15:52:39 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2016-09-10 15:52:39 -0300 |
| commit | 403e7584ff6f0726d13151075d36d8cba8795b16 (patch) | |
| tree | bca18bb66cb1bec9267bcec9fcc1d1e96bbb0367 /manifests/subsystem/sysctl.pp | |
| parent | 36c8650989c02ba7f0559679a8a9ef9877e2d267 (diff) | |
| download | puppet-nodo-403e7584ff6f0726d13151075d36d8cba8795b16.tar.gz puppet-nodo-403e7584ff6f0726d13151075d36d8cba8795b16.tar.bz2 | |
Adds nodo::subsystem::sysctl::tcp_challenge_ack_limit
Diffstat (limited to 'manifests/subsystem/sysctl.pp')
| -rw-r--r-- | manifests/subsystem/sysctl.pp | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/manifests/subsystem/sysctl.pp b/manifests/subsystem/sysctl.pp index 94fbae0..aef4278 100644 --- a/manifests/subsystem/sysctl.pp +++ b/manifests/subsystem/sysctl.pp @@ -1,5 +1,6 @@ class nodo::subsystem::sysctl { class { 'nodo::subsystem::sysctl::disable_ipv6': } + class { 'nodo::subsystem::sysctl::tcp_challenge_ack_limit': } # Root exploit fix, see http://wiki.debian.org/mmap_min_addr # Maybe this can be remove in the future or included in a sysctl puppet module |