diff --git a/sysctl.d/baselayout.conf b/sysctl.d/baselayout.conf index 2d9c6ec..db4b139 100644 --- a/sysctl.d/baselayout.conf +++ b/sysctl.d/baselayout.conf @@ -10,3 +10,7 @@ net.ipv4.conf.all.rp_filter = 1 # Disable kernel address visibility to non-root users. kernel.kptr_restrict = 1 + +# Disable regular file and FIFO protection for compatibility. +fs.protected_regular = 0 +fs.protected_fifos = 0