···

       
100
       
100
       
 
       
        ProtectHostname = true;

     

       
101
       
101
       
 
       
        ProtectKernelLogs = true;

     

       
102
       
102
       
 
       
        ProtectKernelModules = true;

     

       
103
       
103
       
-
       
        ProtectKernalTunables = true;

     

       
103
       
103
       
+
       
        ProtectKernelTunables = true;

     

       
104
       
104
       
 
       
        ProtectProc = "invisible";

     

       
105
       
105
       
 
       
        ProcSubset = "pid";

     

       
106
       
106
       
 
       
        RemoveIPC = true;