summaryrefslogtreecommitdiff
path: root/factory-default
diff options
context:
space:
mode:
Diffstat (limited to 'factory-default')
-rw-r--r--factory-default/sys-apps/baselayout/etc/sysctl.conf3
1 files changed, 3 insertions, 0 deletions
diff --git a/factory-default/sys-apps/baselayout/etc/sysctl.conf b/factory-default/sys-apps/baselayout/etc/sysctl.conf
index f8429068..7a328896 100644
--- a/factory-default/sys-apps/baselayout/etc/sysctl.conf
+++ b/factory-default/sys-apps/baselayout/etc/sysctl.conf
@@ -32,6 +32,9 @@ kernel.kptr_restrict = 2
# PID allocation wrap value
kernel.pid_max = 4194304
+# Users must have CAP_SYSLOG to use dmesg
+kernel.dmesg_restrict = 1
+
# Do not allow O_CREAT open on regular files that we don't own in world
# writable sticky directories, unless they are owned by the owner of the
# directory