summaryrefslogtreecommitdiff
path: root/libre/linux-libre-grsec/sysctl.conf
diff options
context:
space:
mode:
authorLuke Shumaker <LukeShu@sbcglobal.net>2014-06-14 19:20:46 -0400
committerLuke Shumaker <LukeShu@sbcglobal.net>2014-06-14 19:20:46 -0400
commitf7fd1d99d87f11c41cf09f881b1aeb950a3c8e13 (patch)
tree95910fb3078e1136e35aaa6d9f0f251cdb4ca1a8 /libre/linux-libre-grsec/sysctl.conf
parent09c1bb45d89c78a9fd80c7a500cb29a0908dc668 (diff)
parentcd640e7ca0a8968edf887d03db8224334f663e84 (diff)
downloadabslibre-f7fd1d99d87f11c41cf09f881b1aeb950a3c8e13.tar.gz
abslibre-f7fd1d99d87f11c41cf09f881b1aeb950a3c8e13.tar.bz2
abslibre-f7fd1d99d87f11c41cf09f881b1aeb950a3c8e13.zip
Merge branch 'master' of git://projects.parabolagnulinux.org/abslibre
Diffstat (limited to 'libre/linux-libre-grsec/sysctl.conf')
-rw-r--r--libre/linux-libre-grsec/sysctl.conf4
1 files changed, 2 insertions, 2 deletions
diff --git a/libre/linux-libre-grsec/sysctl.conf b/libre/linux-libre-grsec/sysctl.conf
index bef8e350d..ebd4dd574 100644
--- a/libre/linux-libre-grsec/sysctl.conf
+++ b/libre/linux-libre-grsec/sysctl.conf
@@ -44,7 +44,7 @@ kernel.grsecurity.fifo_restrictions = 1
#kernel.grsecurity.romount_protect = 1
#
-# chroot restrictions (these will break containers)
+# chroot restrictions (many of these will break containers)
#
#kernel.grsecurity.chroot_caps = 1
@@ -57,7 +57,7 @@ kernel.grsecurity.fifo_restrictions = 1
#kernel.grsecurity.chroot_deny_shmat = 1
#kernel.grsecurity.chroot_deny_sysctl = 1
#kernel.grsecurity.chroot_deny_unix = 1
-#kernel.grsecurity.chroot_enforce_chdir = 1
+kernel.grsecurity.chroot_enforce_chdir = 1
#kernel.grsecurity.chroot_findtask = 1
#kernel.grsecurity.chroot_restrict_nice = 1