Provision: set kernel.unprivileged_bpf_disabled=1

diff --git a/share/provision/development b/share/provision/development
index 0b477df9e3c5bcdc9e2034f741b2e62a1917b388..5c2ccdb45e4b90e8a83ee351853a49e18f478237 100755 (executable)
--- a/share/provision/development
+++ b/share/provision/development
@@ -29,6 +29,10 @@ APT_INSTALL="sudo LC_ALL=C DEBIAN_FRONTEND=noninteractive apt-get install -y"
 # Ensure we're in the home folder
 cd
 
+# Security
+sudo sysctl kernel.unprivileged_bpf_disabled=1
+echo "kernel.unprivileged_bpf_disabled=1" | sudo tee /etc/sysctl.d/kernel.unprivileged_bpf_disabled.conf > /dev/null
+
 # Configuring APT
 $APT_INSTALL apt-transport-https || exit 1
 sudo sed -i -e "s|http://http.debian.net|https://deb.debian.org|g" /etc/apt/sources.list || exit 1