From: Silvio Rhatto <rhatto@riseup.net>
Date: Mon, 8 Jan 2018 00:49:26 +0000 (-0200)
Subject: Adds nodo::subsystem::sysctl::unprivileged_bpf_disabled
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=12bd1da344adb6ef6d41aaab20bcbac6b942b82b;p=puppet-nodo.git

Adds nodo::subsystem::sysctl::unprivileged_bpf_disabled
---

diff --git a/manifests/subsystem/sysctl/unprivileged_bpf_disabled.pp b/manifests/subsystem/sysctl/unprivileged_bpf_disabled.pp
new file mode 100644
index 0000000..f82bfc9
--- /dev/null
+++ b/manifests/subsystem/sysctl/unprivileged_bpf_disabled.pp
@@ -0,0 +1,6 @@
+# See https://www.debian.org/security/2017/dsa-4073
+class nodo::subsystem::sysctl::unprivileged_bpf_disabled() {
+  nodo::subsystem::sysctl::entry { 'kernel.unprivileged_bpf_disabled':
+    value => '1',
+  }
+}