From: Silvio Rhatto <rhatto@riseup.net>
Date: Mon, 8 Jan 2018 00:03:52 +0000 (-0200)
Subject: Provision: set kernel.unprivileged_bpf_disabled=1
X-Git-Tag: 0.1.0~279
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=de1b5d25df831afb47cf35f49bc9b495b936cd55;p=kvmx.git

Provision: set kernel.unprivileged_bpf_disabled=1
---

diff --git a/share/provision/development b/share/provision/development
index 0b477df..5c2ccdb 100755
--- a/share/provision/development
+++ b/share/provision/development
@@ -29,6 +29,10 @@ APT_INSTALL="sudo LC_ALL=C DEBIAN_FRONTEND=noninteractive apt-get install -y"
 # Ensure we're in the home folder
 cd
 
+# Security
+sudo sysctl kernel.unprivileged_bpf_disabled=1
+echo "kernel.unprivileged_bpf_disabled=1" | sudo tee /etc/sysctl.d/kernel.unprivileged_bpf_disabled.conf > /dev/null
+
 # Configuring APT
 $APT_INSTALL apt-transport-https || exit 1
 sudo sed -i -e "s|http://http.debian.net|https://deb.debian.org|g" /etc/apt/sources.list || exit 1