From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001
From: Lukasz Kasprzak <lukasz.kasprzak@pm.me>
Date: Tue, 14 Apr 2026 22:32:43 +0200
Subject: cleaned up many scrits and deleted some that were of no use; renamed
 a lot

---
 .../db/public/kernel/sysctl.d/99-hardening.conf    | 54 ----------------------
 .../db/public/kernel/sysctl.d/99-wireguard.conf    |  7 ---
 straper/db/public/kernel/sysctl.d/README.sysctl    |  6 ---
 3 files changed, 67 deletions(-)
 delete mode 100644 straper/db/public/kernel/sysctl.d/99-hardening.conf
 delete mode 100644 straper/db/public/kernel/sysctl.d/99-wireguard.conf
 delete mode 100644 straper/db/public/kernel/sysctl.d/README.sysctl

(limited to 'straper/db/public/kernel/sysctl.d')

diff --git a/straper/db/public/kernel/sysctl.d/99-hardening.conf b/straper/db/public/kernel/sysctl.d/99-hardening.conf
deleted file mode 100644
index 87d036c..0000000
--- a/straper/db/public/kernel/sysctl.d/99-hardening.conf
+++ /dev/null
@@ -1,54 +0,0 @@
-# ----------------------------
-# Kernel hardening baseline
-# ----------------------------
-
-# Kernel pointer & info leaks
-kernel.kptr_restrict = 2
-kernel.dmesg_restrict = 1
-kernel.perf_event_paranoid = 3
-
-# Protect against memory corruption exploits
-kernel.randomize_va_space = 2
-vm.mmap_min_addr = 65536
-
-# Disable magic SysRq
-kernel.sysrq = 0
-
-# Restrict kernel logs
-kernel.printk = 3 3 3 3
-
-# Protect links & proc
-fs.protected_hardlinks = 1
-fs.protected_symlinks = 1
-fs.protected_fifos = 2
-fs.protected_regular = 2
-
-# Disable unprivileged user namespaces (major exploit class)
-kernel.unprivileged_userns_clone = 0
-
-# Block ptrace attacks
-kernel.yama.ptrace_scope = 2
-
-# Networking hardening
-net.ipv4.conf.all.accept_redirects = 0
-net.ipv4.conf.default.accept_redirects = 0
-net.ipv4.conf.all.send_redirects = 0
-net.ipv4.conf.default.send_redirects = 0
-net.ipv4.conf.all.accept_source_route = 0
-net.ipv4.conf.default.accept_source_route = 0
-net.ipv4.conf.all.log_martians = 1
-net.ipv4.conf.default.log_martians = 1
-net.ipv4.icmp_ignore_bogus_error_responses = 1
-net.ipv4.tcp_syncookies = 1
-
-# NAT compatibility
-net.ipv4.conf.all.rp_filter = 0
-net.ipv4.conf.default.rp_filter = 0
-net.ipv4.conf.enx00e04c2e4828.rp_filter = 0
-
-# Disable unprivileged BPF
-kernel.unprivileged_bpf_disabled = 1
-
-# Restrict kernel tracing
-kernel.ftrace_enabled = 0
-
diff --git a/straper/db/public/kernel/sysctl.d/99-wireguard.conf b/straper/db/public/kernel/sysctl.d/99-wireguard.conf
deleted file mode 100644
index c9fa562..0000000
--- a/straper/db/public/kernel/sysctl.d/99-wireguard.conf
+++ /dev/null
@@ -1,7 +0,0 @@
-net.ipv4.ip_forward=1
-net.ipv4.conf.all.rp_filter=0
-net.ipv4.conf.default.rp_filter=0
-net.ipv4.conf.wg0.rp_filter=0
-net.ipv4.conf.enx00e04c2e4828.rp_filter=0
-net.ipv6.conf.wg0.disable_ipv6=1
-
diff --git a/straper/db/public/kernel/sysctl.d/README.sysctl b/straper/db/public/kernel/sysctl.d/README.sysctl
deleted file mode 100644
index 0d3eca6..0000000
--- a/straper/db/public/kernel/sysctl.d/README.sysctl
+++ /dev/null
@@ -1,6 +0,0 @@
-Files located in this directory can set kernel parameters using the
-sysctl(8) or systemd-sysctl(8) tool which is typically run with a
-unit/init file started during the boot sequence.
-
-For details regarding the configuration files refer to
-sysctl.d(5) or sysctl.conf(5)
-- 
cgit v1.3