Skip to content

Commit

Permalink
Don't both sysctl -w and sysctl -p in setting grsec lock
Browse files Browse the repository at this point in the history
Because it is using both, the second sysctl -p is failing on noble/6.6
because the grsec lock is already set. Let's just skip the first sysctl
-w and rely only on sysctl -p (which is more like how the kernel works
when it boots) to set the necessary values.
  • Loading branch information
legoktm committed Oct 25, 2024
1 parent 2baedeb commit acc93b2
Showing 1 changed file with 0 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,6 @@
sysctl:
name: "{{ item.name }}"
value: "{{ item.value }}"
sysctl_set: yes
state: present
reload: yes
with_items: "{{ grsec_sysctl_flags }}"
Expand Down

0 comments on commit acc93b2

Please sign in to comment.