|
@@ -290,11 +290,20 @@ function configure_internet_protocol {
|
290
|
290
|
sed -i "s|#net.ipv4.conf.default.accept_redirects.*|net.ipv4.conf.default.accept_redirects = 0|g" /etc/sysctl.conf
|
291
|
291
|
sed -i "s|net.ipv4.conf.default.accept_redirects.*|net.ipv4.conf.default.accept_redirects = 0|g" /etc/sysctl.conf
|
292
|
292
|
fi
|
|
293
|
+
|
|
294
|
+ # Randomize kernel
|
293
|
295
|
if ! grep -q "kernel.randomize_va_space" /etc/sysctl.conf; then
|
294
|
296
|
echo "kernel.randomize_va_space=2" >> /etc/sysctl.conf
|
295
|
297
|
else
|
296
|
298
|
sed -i 's|kernel.randomize_va_space.*|kernel.randomize_va_space=2|g' /etc/sysctl.conf
|
297
|
299
|
fi
|
|
300
|
+
|
|
301
|
+ # Turn off the tcp_timestamps
|
|
302
|
+ if ! grep -q "net.ipv4.tcp_timestamps" /etc/sysctl.conf; then
|
|
303
|
+ echo "net.ipv4.tcp_timestamps=0" >> /etc/sysctl.conf
|
|
304
|
+ else
|
|
305
|
+ sed -i 's|net.ipv4.tcp_timestamps.*|net.ipv4.tcp_timestamps=0|g' /etc/sysctl.conf
|
|
306
|
+ fi
|
298
|
307
|
mark_completed $FUNCNAME
|
299
|
308
|
}
|
300
|
309
|
|