ubuntu/proc at main · Ghost414Entourage/ubuntu · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
for i in /proc/sys/net/ipv4/conf/*/rp_filter; do echo 2 > "$i"; done
grep . /proc/sys/net/ipv4/conf/*/rp_filter

for i in /proc/sys/net/ipv4/conf/*/accept_redirects; do echo 0 > "$i"; done
grep . /proc/sys/net/ipv4/conf/*/accept_redirects

for i in /proc/sys/net/ipv6/conf/*/accept_redirects; do echo 0 > "$i"; done
grep . /proc/sys/net/ipv6/conf/*/accept_redirects

for i in /proc/sys/net/ipv4/conf/*/secure_redirects; do echo 0 > "$i"; done
grep . /proc/sys/net/ipv4/conf/*/secure_redirects

for i in /proc/sys/net/ipv4/conf/*/accept_source_route; do echo 0 > "$i"; done
grep . /proc/sys/net/ipv4/conf/*/accept_source_route

for i in /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts; do echo 1 > "$i"; done
grep . /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts

for i in /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses; do echo 1 > "$i"; done
grep . /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses

for i in /proc/sys/net/ipv4/tcp_syncookies; do echo 1 > "$i"; done
grep . /proc/sys/net/ipv4/tcp_syncookies

for i in /proc/sys/net/ipv4/conf/*/send_redirects; do echo 0 > "$i"; done
grep . /proc/sys/net/ipv4/conf/*/send_redirects

for i in /proc/sys/net/ipv4/conf/*/log_martians; do echo 1 > "$i"; done
grep . /proc/sys/net/ipv4/conf/*/log_martians

for i in /proc/sys/net/ipv6/conf/*/accept_ra; do echo 0 | tee "$i" >/dev/null; done
grep . /proc/sys/net/ipv6/conf/*/accept_ra

for i in /proc/sys/net/ipv6/conf/*/disable_ipv6; do echo 1 | tee "$i" >/dev/null; done
grep . /proc/sys/net/ipv6/conf/*/disable_ipv6

for i in /proc/sys/net/ipv4/conf/*/arp_ignore; do echo 1 > "$i"; done
grep . /proc/sys/net/ipv4/conf/*/arp_ignore

echo 2 > /proc/sys/fs/protected_regular
grep . /proc/sys/fs/protected_regular

echo 2 > /proc/sys/fs/protected_fifos
grep . /proc/sys/fs/protected_fifos

echo 1 > /proc/sys/fs/protected_hardlinks
grep . /proc/sys/fs/protected_hardlinks

echo 1 > /proc/sys/fs/protected_symlinks
grep . /proc/sys/fs/protected_symlinks

echo 0 > /proc/sys/fs/suid_dumpable
grep . /proc/sys/fs/suid_dumpable

echo 2 > /proc/sys/kernel/randomize_va_space
grep . /proc/sys/kernel/randomize_va_space

echo 1 > /proc/sys/kernel/core_uses_pid
grep . /proc/sys/kernel/core_uses_pid

echo 1 > /proc/sys/kernel/dmesg_restrict
grep . /proc/sys/kernel/dmesg_restrict

echo 2 > /proc/sys/kernel/kptr_restrict
grep . /proc/sys/kernel/kptr_restrict

echo 1 > /proc/sys/kernel/modules_disabled
grep . /proc/sys/kernel/modules_disabled