airship
/
treasuremap
Code Issues Proposed changes

Merge "Set kernel.randomize_va_space = 2"

This commit is contained in:
Zuul 2018-11-27 18:25:10 +00:00 committed by Gerrit Code Review
parent 0ad50a083b 7ab2793aa9
commit 5efc93f38b
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
global/software/charts/ucp/divingbell/divingbell.yaml
View File

@ -49,6 +49,8 @@ data:
# Reboot the node 60 seconds after a kernel panic, instead of default
# value of 0 (i.e. never reboot)
kernel.panic: '60'
# Randomize stack space to prevent buffer overflow exploits
kernel.randomize_va_space: '2'
# Accept gratuitous ARP to support failover scenarios
# https://bugs.launchpad.net/fuel/+bug/1456272
net.ipv4.conf.default.arp_accept: '1'