Sysctl - revision history

Dank at 03:21, 23 September 2019

2019-09-23T03:21:27Z

← Older revision		Revision as of 03:21, 23 September 2019
Line 1:		Line 1:
	User-supplied sysctls are best provided via files dropped into <tt>/etc/sysctl.d</tt> (these files must have a <tt>conf</tt> extension). Each has a corresponding entry in <tt>/proc/sys</tt>, assuming [[procfs]] is mounted. With or without a mounted procfs, the <tt>sysctl</tt> command line tool.		User-supplied sysctls are best provided via files dropped into <tt>/etc/sysctl.d</tt> (these files must have a <tt>conf</tt> extension). Each has a corresponding entry in <tt>/proc/sys</tt>, assuming [[procfs]] is mounted. With or without a mounted procfs, the <tt>sysctl</tt> command line tool.

	There is a sysctl system call, but it has been deprecated since Linux 2.6.24, and its usage is discouraged. FreeBSD supports the system call.		There is a sysctl system call, but it has been deprecated since Linux 2.6.24, and its usage is discouraged. FreeBSD supports the system call. Supported sysctls can be enumerated using <tt>sysctl -a</tt>.

	==Some favorite sysctls==		==Some favorite sysctls==

Dank at 03:21, 23 September 2019

2019-09-23T03:21:01Z

← Older revision		Revision as of 03:21, 23 September 2019
Line 1:		Line 1:
	User-supplied sysctls are best provided via files dropped into <tt>/etc/sysctl.d</tt> (these files must have a <tt>conf</tt> extension). Each has a corresponding entry in <tt>/proc/sys</tt>, assuming [[procfs]] is mounted.		User-supplied sysctls are best provided via files dropped into <tt>/etc/sysctl.d</tt> (these files must have a <tt>conf</tt> extension). Each has a corresponding entry in <tt>/proc/sys</tt>, assuming [[procfs]] is mounted. With or without a mounted procfs, the <tt>sysctl</tt> command line tool.

			There is a sysctl system call, but it has been deprecated since Linux 2.6.24, and its usage is discouraged. FreeBSD supports the system call.

	==Some favorite sysctls==		==Some favorite sysctls==

Dank at 03:15, 23 September 2019

2019-09-23T03:15:36Z

← Older revision		Revision as of 03:15, 23 September 2019
Line 11:		Line 11:
	* <tt>net.ipv4.tcp_syncookies=1</tt> enable TCP syncookies (see http://lwn.net/Articles/277146/)		* <tt>net.ipv4.tcp_syncookies=1</tt> enable TCP syncookies (see http://lwn.net/Articles/277146/)
	* <tt>net.ipv4.conf.default.rp_filter=1</tt>, <tt>net.ipv4.conf.all.rp_filter=1</tt> enable reverse path filter		* <tt>net.ipv4.conf.default.rp_filter=1</tt>, <tt>net.ipv4.conf.all.rp_filter=1</tt> enable reverse path filter
			* <tt>net.core.bpf_jit_enable=1</tt> enables [[EBPF\|eBPF]] JIT

Dank at 03:13, 23 September 2019

2019-09-23T03:13:46Z

← Older revision		Revision as of 03:13, 23 September 2019
Line 1:		Line 1:
	User-supplied sysctls are best provided via files dropped into <tt>/etc/sysctl.d</tt> (these files must have a <tt>conf</tt> extension). Each has a corresponding entry in <tt>/proc/sys</tt>, assuming [[procfs]] is mounted.		User-supplied sysctls are best provided via files dropped into <tt>/etc/sysctl.d</tt> (these files must have a <tt>conf</tt> extension). Each has a corresponding entry in <tt>/proc/sys</tt>, assuming [[procfs]] is mounted.

	==Some favorite ~~systctls~~==		==Some favorite sysctls==
	* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output		* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output
	* <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[Performance Counters\|performance counter]]		* <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[Performance Counters\|performance counter]]

Dank at 03:13, 23 September 2019

2019-09-23T03:13:35Z

← Older revision		Revision as of 03:13, 23 September 2019
Line 1:		Line 1:
			User-supplied sysctls are best provided via files dropped into <tt>/etc/sysctl.d</tt> (these files must have a <tt>conf</tt> extension). Each has a corresponding entry in <tt>/proc/sys</tt>, assuming [[procfs]] is mounted.

	==Some favorite systctls==		==Some favorite systctls==
	* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output		* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output

Dank at 03:12, 23 September 2019

2019-09-23T03:12:07Z

← Older revision		Revision as of 03:12, 23 September 2019
Line 2:		Line 2:
	* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output		* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output
	* <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[Performance Counters\|performance counter]]		* <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[Performance Counters\|performance counter]]
			* <tt>kernel.perf_event_paranoid=-1</tt> allow unprivileged access to [[Performance Counters\|performance counters]]
	* <tt>net.ipv4.ip_forward=1</tt> enable IPv4 packet forwarding		* <tt>net.ipv4.ip_forward=1</tt> enable IPv4 packet forwarding
	* <tt>net.ipv6.conf.all.forwarding=1</tt> enable IPv6 packet forwarding		* <tt>net.ipv6.conf.all.forwarding=1</tt> enable IPv6 packet forwarding
Line 8:		Line 9:
	* <tt>net.ipv4.tcp_syncookies=1</tt> enable TCP syncookies (see http://lwn.net/Articles/277146/)		* <tt>net.ipv4.tcp_syncookies=1</tt> enable TCP syncookies (see http://lwn.net/Articles/277146/)
	* <tt>net.ipv4.conf.default.rp_filter=1</tt>, <tt>net.ipv4.conf.all.rp_filter=1</tt> enable reverse path filter		* <tt>net.ipv4.conf.default.rp_filter=1</tt>, <tt>net.ipv4.conf.all.rp_filter=1</tt> enable reverse path filter
	* <tt>kernel.perf_event_paranoid=-1</tt> allow unprivileged access to [[Performance Counters\|performance counters]]

Dank at 03:11, 23 September 2019

2019-09-23T03:11:51Z

← Older revision		Revision as of 03:11, 23 September 2019
Line 2:		Line 2:
	* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output		* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output
	* <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[Performance Counters\|performance counter]]		* <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[Performance Counters\|performance counter]]
			* <tt>net.ipv4.ip_forward=1</tt> enable IPv4 packet forwarding
			* <tt>net.ipv6.conf.all.forwarding=1</tt> enable IPv6 packet forwarding
			* <tt>net.netfilter.nf_conntrack_acct=1</tt> turn on packet/byte stats in conntrack table
			* <tt>net.netfilter.nf_conntrack_timestamp=1</tt> turn on timestamps in conntrack table
			* <tt>net.ipv4.tcp_syncookies=1</tt> enable TCP syncookies (see http://lwn.net/Articles/277146/)
			* <tt>net.ipv4.conf.default.rp_filter=1</tt>, <tt>net.ipv4.conf.all.rp_filter=1</tt> enable reverse path filter
			* <tt>kernel.perf_event_paranoid=-1</tt> allow unprivileged access to [[Performance Counters\|performance counters]]

Dank at 03:08, 23 September 2019

2019-09-23T03:08:42Z

← Older revision		Revision as of 03:08, 23 September 2019
Line 1:		Line 1:
	==Some favorite systctls==		==Some favorite systctls==
	* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output		* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output
	* <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[performance counter]]		* <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[Performance Counters\|performance counter]]

Dank: Created page with "==Some favorite systctls== * `kernel.dmesg_restrict=0` allows regular users to see `dmesg` output * `kernel.nmi_watchdog=0` disables the NMI watchdog, fre..."

2019-09-23T03:07:53Z

Created page with "==Some favorite systctls== * <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output * <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, fre..."

New page

==Some favorite systctls==
* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output
* <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[performance counter]]

Sysctl - revision history

Dank at 03:21, 23 September 2019

Dank at 03:21, 23 September 2019

Dank at 03:15, 23 September 2019

Dank at 03:13, 23 September 2019

Dank at 03:13, 23 September 2019

Dank at 03:12, 23 September 2019

Dank at 03:11, 23 September 2019

Dank at 03:08, 23 September 2019

Dank: Created page with "==Some favorite systctls== * kernel.dmesg_restrict=0 allows regular users to see dmesg output * kernel.nmi_watchdog=0 disables the NMI watchdog, fre..."

Dank: Created page with "==Some favorite systctls== * `kernel.dmesg_restrict=0` allows regular users to see `dmesg` output * `kernel.nmi_watchdog=0` disables the NMI watchdog, fre..."