This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".
The branch, next has been updated via 37533b0deabab9f1e44ac8d710c9cd6f1e4570f7 (commit) via 29a8992b7228771fb2cfc68679596598fb01105a (commit) from 6075720c481ee58367d06088c18739e26b768201 (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit 37533b0deabab9f1e44ac8d710c9cd6f1e4570f7 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Mon Mar 30 17:09:34 2020 +0000
core143: apply changed sysctl settings
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 29a8992b7228771fb2cfc68679596598fb01105a Author: Peter Müller peter.mueller@ipfire.org Date: Thu Jan 23 21:28:00 2020 +0000
sysctl.conf: Turn on hard- and symlink protection
Cc: Michael Tremer michael.tremer@ipfire.org Cc: Arne Fitzenreiter arne_f@ipfire.org Signed-off-by: Peter Müller peter.mueller@ipfire.org Acked-by: Michael Tremer michael.tremer@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
-----------------------------------------------------------------------
Summary of changes: config/etc/sysctl.conf | 4 ++++ config/rootfiles/core/143/update.sh | 3 +++ 2 files changed, 7 insertions(+)
Difference in files: diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf index d11e53c88..7e7ebee44 100644 --- a/config/etc/sysctl.conf +++ b/config/etc/sysctl.conf @@ -45,6 +45,10 @@ kernel.kptr_restrict = 2 # Avoid kernel memory address exposures via dmesg. kernel.dmesg_restrict = 1
+# Turn on hard- and symlink protection +fs.protected_symlinks = 1 +fs.protected_hardlinks = 1 + # Minimal preemption granularity for CPU-bound tasks: # (default: 1 msec# (1 + ilog(ncpus)), units: nanoseconds) kernel.sched_min_granularity_ns = 10000000 diff --git a/config/rootfiles/core/143/update.sh b/config/rootfiles/core/143/update.sh index bc28f7de7..51c4557bd 100644 --- a/config/rootfiles/core/143/update.sh +++ b/config/rootfiles/core/143/update.sh @@ -68,6 +68,9 @@ chown cron:cron /var/spool/cron # restart init after glibc replace telinit u
+# Apply changed sysctl settings +/etc/init.d/sysctl start + # Apply local configuration to sshd_config /usr/local/bin/sshctrl
hooks/post-receive -- IPFire 2.x development tree