mirror of https://github.com/CISOfy/lynis.git
Changed sections into comment lines
This commit is contained in:
parent
d3f33a32cd
commit
9192f4bbb8
|
@ -104,12 +104,12 @@ plugin=users
|
|||
#
|
||||
#################################################################################
|
||||
|
||||
[processes]
|
||||
# Processes
|
||||
#sysctl:kern.randompid:1234:1:Increase the next PID with an amount close to the given value:
|
||||
sysctl:security.bsd.see_other_gids:0:1:Disable display of processes of other groups:
|
||||
sysctl:security.bsd.see_other_uids:0:1:Disable display of processes of other users:
|
||||
|
||||
[kernel]
|
||||
# Kernel
|
||||
sysctl:kern.sugid_coredump:0:1:XXX:
|
||||
sysctl:kernel.core_setuid_ok:0:1:XXX:
|
||||
sysctl:kernel.core_uses_pid:1:1:XXX:
|
||||
|
@ -120,7 +120,7 @@ sysctl:kernel.kptr_restrict:1:1:Restrict access to kernel symbols:
|
|||
sysctl:kernel.sysrq:0:1:Disable magic SysRQ:
|
||||
sysctl:kernel.use-nx:0:1:XXX:
|
||||
|
||||
[network]
|
||||
# Network
|
||||
sysctl:net.inet.icmp.bmcastecho:0:1:Ignore ICMP packets directed to broadcast address:
|
||||
sysctl:net.inet.icmp.rediraccept:0:1:Disable incoming ICMP redirect routing redirects:
|
||||
sysctl:net.inet.ip.accept_sourceroute:0:1:Disable IP source routing:
|
||||
|
|
Loading…
Reference in New Issue