Comment 20 for bug 447197

Revision history for this message
Julio Sanchez Cubas (jscubas) wrote :

Here they are,

$ ls -l /etc/sysctl.d
total 16
-rw-r--r-- 1 root root 77 2009-03-18 23:17 10-console-messages.conf
-rw-r--r-- 1 root root 509 2009-03-18 23:17 10-network-security.conf
-rw-r--r-- 1 root root 107 2009-10-26 10:49 30-wine.conf
-rw-r--r-- 1 root root 450 2009-03-18 23:17 README

$ cat /etc/sysctl.d/*
# the following stops low-level messages on console
kernel.printk = 4 4 1 7

# Turn on Source Address Verification in all interfaces to
# prevent some spoofing attacks.
net.ipv4.conf.default.rp_filter=1
net.ipv4.conf.all.rp_filter=1

# Turn on SYN-flood protections. Starting with 2.6.26, there is no loss
# of TCP functionality/features under normal conditions. When flood
# protections kick in under high unanswered-SYN load, the system
# should remain more stable, with a trade off of some loss of TCP
# functionality/features (e.g. TCP Window scaling).
net.ipv4.tcp_syncookies=1
# Wine needs to access the bottom 64k of memory in order to launch
# 16 bit programs.
vm.mmap_min_addr = 0
This directory contains settings similar to those found in /etc/sysctl.conf.
In general, files in the 10-*.conf range come from the procps package and
serve as system defaults. Other packages install their files in the
30-*.conf range, to override system defaults. End-users can use 60-*.conf
and above, or use /etc/sysctl.conf directly, which overrides anything in
this directory.

After making any changes, please run "invoke-rc.d procps start".