Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ERL-{375,376,378,379,381}: Ensure various sysctl parameters are set #50

Merged
merged 5 commits into from
Sep 14, 2023
Merged

ERL-{375,376,378,379,381}: Ensure various sysctl parameters are set #50

merged 5 commits into from
Sep 14, 2023

Commits on Sep 11, 2023

  1. ERL-381: spread: add test for verifying sysctl parameters 

    Signed-off-by: Isaac True <isaac.true@canonical.com>
    @IsaacJT
    IsaacJT committed Sep 11, 2023
    Configuration menu
    Copy the full SHA
    8609e61 View commit details
    Browse the repository at this point in the history

  2. ERL-375: nemos-images-*: *: set sysctl kernel.yama.ptrace_scope=1 

    This enables restricted ptrace access, meaning a process must have a
predefined relationship with the inferior it wants to call PTRACE_ATTACH on.

Signed-off-by: Isaac True <isaac.true@canonical.com>
    @IsaacJT
    IsaacJT committed Sep 11, 2023
    Configuration menu
    Copy the full SHA
    94b7b2c View commit details
    Browse the repository at this point in the history

  3. ERL-376: nemos-images-*: *: set sysctl kernel.kptr_restrict=1 

    This setting only allows privileged users to view the kernel memory addresses.

Signed-off-by: Isaac True <isaac.true@canonical.com>
    @IsaacJT
    IsaacJT committed Sep 11, 2023
    Configuration menu
    Copy the full SHA
    e345b06 View commit details
    Browse the repository at this point in the history

  4. ERL-378: nemos-images-*: *: set sysctl kernel.randomize_va_space=2 

    This enables all kernel address space randomisation features.

Signed-off-by: Isaac True <isaac.true@canonical.com>
    @IsaacJT
    IsaacJT committed Sep 11, 2023
    Configuration menu
    Copy the full SHA
    60f3149 View commit details
    Browse the repository at this point in the history

  5. ERL-379: nemos-images-*: *: set sysctl vm.overcommit_memory=2 

    This setting disables memory overcommit.

Signed-off-by: Isaac True <isaac.true@canonical.com>
    @IsaacJT
    IsaacJT committed Sep 11, 2023
    Configuration menu
    Copy the full SHA
    266b37b View commit details
    Browse the repository at this point in the history