From 403e7584ff6f0726d13151075d36d8cba8795b16 Mon Sep 17 00:00:00 2001 From: Silvio Rhatto Date: Sat, 10 Sep 2016 15:52:39 -0300 Subject: Adds nodo::subsystem::sysctl::tcp_challenge_ack_limit --- manifests/subsystem/sysctl.pp | 1 + 1 file changed, 1 insertion(+) (limited to 'manifests/subsystem/sysctl.pp') diff --git a/manifests/subsystem/sysctl.pp b/manifests/subsystem/sysctl.pp index 94fbae0..aef4278 100644 --- a/manifests/subsystem/sysctl.pp +++ b/manifests/subsystem/sysctl.pp @@ -1,5 +1,6 @@ class nodo::subsystem::sysctl { class { 'nodo::subsystem::sysctl::disable_ipv6': } + class { 'nodo::subsystem::sysctl::tcp_challenge_ack_limit': } # Root exploit fix, see http://wiki.debian.org/mmap_min_addr # Maybe this can be remove in the future or included in a sysctl puppet module -- cgit v1.2.3