tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Changed sections into comment lines

This commit is contained in:
mboelen 2016-04-13 16:08:57 +02:00
parent d3f33a32cd
commit 9192f4bbb8
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
default.prf
View File

@ -104,12 +104,12 @@ plugin=users
# #
################################################################################# #################################################################################
[processes] # Processes
#sysctl:kern.randompid:1234:1:Increase the next PID with an amount close to the given value: #sysctl:kern.randompid:1234:1:Increase the next PID with an amount close to the given value:
sysctl:security.bsd.see_other_gids:0:1:Disable display of processes of other groups: sysctl:security.bsd.see_other_gids:0:1:Disable display of processes of other groups:
sysctl:security.bsd.see_other_uids:0:1:Disable display of processes of other users: sysctl:security.bsd.see_other_uids:0:1:Disable display of processes of other users:
[kernel] # Kernel
sysctl:kern.sugid_coredump:0:1:XXX: sysctl:kern.sugid_coredump:0:1:XXX:
sysctl:kernel.core_setuid_ok:0:1:XXX: sysctl:kernel.core_setuid_ok:0:1:XXX:
sysctl:kernel.core_uses_pid:1:1:XXX: sysctl:kernel.core_uses_pid:1:1:XXX:
@ -120,7 +120,7 @@ sysctl:kernel.kptr_restrict:1:1:Restrict access to kernel symbols:
sysctl:kernel.sysrq:0:1:Disable magic SysRQ: sysctl:kernel.sysrq:0:1:Disable magic SysRQ:
sysctl:kernel.use-nx:0:1:XXX: sysctl:kernel.use-nx:0:1:XXX:
[network] # Network
sysctl:net.inet.icmp.bmcastecho:0:1:Ignore ICMP packets directed to broadcast address: sysctl:net.inet.icmp.bmcastecho:0:1:Ignore ICMP packets directed to broadcast address:
sysctl:net.inet.icmp.rediraccept:0:1:Disable incoming ICMP redirect routing redirects: sysctl:net.inet.icmp.rediraccept:0:1:Disable incoming ICMP redirect routing redirects:
sysctl:net.inet.ip.accept_sourceroute:0:1:Disable IP source routing: sysctl:net.inet.ip.accept_sourceroute:0:1:Disable IP source routing: