aboutsummaryrefslogtreecommitdiffstats
path: root/sysctl.conf
Commit message (Collapse)AuthorAgeFilesLines
* Drop sysctl.d/00-system.confZbigniew Jędrzejewski-Szmek2017-07-271-9/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | This file now only contains lines to disable netfilter on bridges. In kernel 3.18 this filtering functionality was made non-default by moving it to br_netfilter [https://bugzilla.redhat.com/show_bug.cgi?id=512206]. Aybody who actually wants to use br_netfilter has to load it explicitly anyway, so disabling it through sysctl isn't necessary anymore. The reason for removal is that by default (i.e. when br_netfilter is not loaded), we get a warning on every boot: systemd-sysctl[210]: Couldn't write '0' to 'net/bridge/bridge-nf-call-ip6tables', ignoring: No such file or directory systemd-sysctl[210]: Couldn't write '0' to 'net/bridge/bridge-nf-call-iptables', ignoring: No such file or directory systemd-sysctl[210]: Couldn't write '0' to 'net/bridge/bridge-nf-call-arptables', ignoring: No such file or directory This is confusing for users and inelegant. The downside of removing this file is for people who load br_netfilter for some reason *and* do no want to use it, will have to take an additional step now (either restore the sysctl settings or remove br_netfilter from /etc/modules-load.d or wherever). I expect the number of people affected to be very small. (Note that the file was overwritten on sparc and s390, so those architectures see no change.)
* sysctl.conf: drop SHMALL and SHMMAX, they have sane default values in kernelLukas Nykryn2015-05-061-6/+0
|
* set shmmax and shmall defaults to match rhel6 values (#1056547)Lukas Nykryn2014-02-131-0/+6
|
* remove some defaults from sysctl.conf (move to systemd)Václav Pavlín2013-04-031-20/+0
|
* turn on symlink protections in sysctl (#922030)Lukas Nykryn2013-03-151-0/+4
|
* Remove outdated "Red Hat Linux" comments from sysctl.conf.Ville Skyttä2011-02-251-1/+1
|
* Disable netfilter on bridged interfaces. (#512206)Bill Nottingham2009-07-311-0/+5
|
* DaveM hates syncookies.Bill Nottingham2008-07-241-3/+0
| | | | TCP snickerdoodles are next on the hit list.
* add syncookies (#145201)Bill Nottingham2005-01-171-0/+3
|
* - disallow source routed packets by defaultr7-89Florian La Roche2004-10-071-0/+3
|
* - start cleaning up some sh coding thingsFlorian La Roche2002-06-261-2/+2
|
* enable core dumps with PIDs by default.Preston Brown2001-09-271-3/+14
|
* use conf.default for rp_filter, not conf.all (#50166)Bill Nottingham2001-08-091-1/+1
|
* ip_always_defrag goes *poof*Bill Nottingham2001-01-151-2/+0
|
* *** empty log message ***r4-98Bill Nottingham2000-03-071-1/+0
|
* add an extra newlineBill Nottingham2000-03-071-0/+1
|
* add filesBill Nottingham1999-12-281-0/+8