Sysctl: Difference between revisions
No edit summary |
No edit summary |
||
| Line 2: | Line 2: | ||
* <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output | * <tt>kernel.dmesg_restrict=0</tt> allows regular users to see <tt>dmesg</tt> output | ||
* <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[Performance Counters|performance counter]] | * <tt>kernel.nmi_watchdog=0</tt> disables the NMI watchdog, freeing up a [[Performance Counters|performance counter]] | ||
* <tt>kernel.perf_event_paranoid=-1</tt> allow unprivileged access to [[Performance Counters|performance counters]] | |||
* <tt>net.ipv4.ip_forward=1</tt> enable IPv4 packet forwarding | * <tt>net.ipv4.ip_forward=1</tt> enable IPv4 packet forwarding | ||
* <tt>net.ipv6.conf.all.forwarding=1</tt> enable IPv6 packet forwarding | * <tt>net.ipv6.conf.all.forwarding=1</tt> enable IPv6 packet forwarding | ||
| Line 8: | Line 9: | ||
* <tt>net.ipv4.tcp_syncookies=1</tt> enable TCP syncookies (see http://lwn.net/Articles/277146/) | * <tt>net.ipv4.tcp_syncookies=1</tt> enable TCP syncookies (see http://lwn.net/Articles/277146/) | ||
* <tt>net.ipv4.conf.default.rp_filter=1</tt>, <tt>net.ipv4.conf.all.rp_filter=1</tt> enable reverse path filter | * <tt>net.ipv4.conf.default.rp_filter=1</tt>, <tt>net.ipv4.conf.all.rp_filter=1</tt> enable reverse path filter | ||